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(54) Reception apparatus having a storage unit for recording a scrambled broadcast signal and 
broadcast apparatus for scrambiing a signal to be broadcast, and associated methods 



(57) A reception apparatus includes: a reception 
unit for receiving the scrambled content, the scrambled 
content being scrambled so that a predetermined unit 
of scrambled content is descrarnbled using a descram- 
bling key corresponding to the predetermined unit of 
scrambled content, and at least one piece of storage in- 
formation In which a list including all descrambiing keys 
used for descrambiing the scrambled content is embed- 
ded; storage unit for storing the received scrambled con- 
tent and the storage inform atjon; list extraction unit for 
extracting the list from the stored storage information; 
descramble processing unit for extracting the predeter- 
mined unit of scrambled content from the stored scram- 
bled content, extracting a descrambiing key corre- 
sponding to the predetermined unit of scrambled con- 
tent from the extracted list, and descrambiing the ex- 
tracted predetermined unit of scrambled content using 
the extracted descrambiing key; and reproduction unit 
for reproducing the predetermined unit of descrarnbled 
content in the descrarnbled order. 

Recording media used in the storage unit can be, 
for example, removable recording media such as a flop- 
py disk, a compact disk, a magnet optical disk, a DVD 
disk, and a memory card and fixed recording media such 
as hard disk, semiconductor memory. 

The invention is particularly applicable to pay satel- 
lite digital broadcast systems for recording scrambled 
content. 



FIG. I 
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Description 

BACKGROUND OF THE INVENTION 

(1) Field of the Invention 

[0001] The present invention relates to a storage 
service in the digital broadcast or the like, whereby re- 
ceived scrambled content is stored and then descram- 
bled as required. More specifically, the present invention 
relates to technology for improving performance of the 
service in some particular reproduction modes. 

(2) Description of the Related Art 

[0002] In the current pay satellite digital broadcast 
system, a viewer contracts with a broadcast provider to 
pay some amount of charges to the broadcast provider 
for viewing programs on selected channels. 
[0003] Since a broadcasting satellite broadcasts on a 
number of channels, programs on the channels for 
which a viewer does not make subscribing contracts are 
also broadcast to the viewer. The receiver owned by the 
viewer, then, confirms the presence/absence of the sub- 
scribing contract for each channel and receives only 
programs on the channels allowed to be viewed. Such 
technology for selecting channels to receive programs 
thereon is called Conditional Access (abbreviated as 
"CA"). 

[0004] On the other hand, the transmitter scrambles 
content including audio and visual data of a pay broad- 
cast program to be broadcast one each channel, where 
content per predetermined unit is scrambled with a 
scrambling key different for each predetermined unit of 
contents. The transmitter, then, sequentially transmits 
the scrambled content accompanied with an Entitlement 
Control Message (ECM) containing this scrambling key 
and the scrambling key for content in the successive 
predetermined unit This ECM is encrypted so as to be 
interpreted only by the receivers owned by subscribers 
to the channel. 

[0005] Note that the scrambling key used for scram- 
bling data functions as a descrambiing key as well for 
descrambling the data. 

[0006] Each receiver comes with an IC card used for 
the receiver only, to which an identifying number asso- 
ciated with the subscriber is assigned. The IC card has 
a CPU and a memory within it to store contract condi- 
tions and software for executing CA processes. The da- 
ta relating to the CA processes is completely digitized 
and contained in the IC card, which makes unauthorized 
viewing difficult and therefore provides high levels of se- 
curity. 

[0007] Meanwhile, the service called a "storage serv- 
ice" is scheduled to become operational targeted for 
those who have not yet subscribed to a channel so that, 
once storing scrambled content with ECM in the record- 
ing media in the receivers owned by them, they pay 



some amount of charges for viewing the content to be- 
come subscribers, which enables them to decode the 
ECMs so as to reproduce the stored scrambled content. 
[0008] In such a service, when reproducing content in 

s the normal reproduction mode, the receiver acquires 
content in the first predetermined unit, and decodes the 
accompanied ECM to extract the scrambling keys for 
content in the first and the second units. Then, the re- 
ceiver descrambles the content in the first unit using the 

10 ■ scrambling key exclusive to the content. As for the con- 
tent in the second unit or later, the receiver sequentially 
descrambles content in each unit using the scrambling 
key obtained in the process for the preceding unit. 
[0009] However, when reproducing content by the 

15 storage service in the particular reproduction modes 
such as a fast-forward reproduction mode and a fast- 
reverse reproduction mode, the receiver cannot de- 
scramble content in each unit using the scrambling key 
obtained in the process for the preceding unit, because 

20 the order of the reproduction becomes different from 
that in the normal reproduction mode. Therefore, the re- 
ceiver has to, each time acquiring content in a predeter- 
mined unit, decode the accompanied ECM to obtain a 
scrambling key and descramble the scrambled content 

25 using the key, which makes it difficult to realize a suffi- 
cient performance level of the particular reproduction 
modes, such as fast-forward speed. 

SUMMARY OF THE INVENTION 

30 

[0010] The object of the invention is to provide a 
broadcast apparatus for offering a storage service, a 
method and a computer program for the same, a recep- 
tion apparatus for offering the storage service, and, a 

35 method and a computer program for the same, all of 
which improve performance of particular reproduction 
processes in the storage service. 
[001 1 ] The reception apparatus (hereafter called "re- 
ception apparatus A") for providing a storage service ac- 

40 cording to the invention is made up of: a reception unit 
for receiving the scrambled content, wherein the scram- 
bled content is scrambled so that a predetermined unit 
of scrambled content, which is a portion of the scram- 
bled content, is descrambled using a descrambling key 

45 corresponding to the predetermined unit of scrambled 
content, and at least one piece of storage information in 
which a list including ail descrambling keys to be used 
for descrambling the scrambled content is embedded; 
a storage unitfor storing the received scrambled content 

so and the storage information; a list extraction unit for ex- 
tracting the list from the stored storage information; a 
descramble processing unit for (a) extracting the prede- 
termined unit of scrambled content from the stored 
scrambled content, (b) extracting a descrambling key 

55 corresponding to the predetermined unit of scrambled 
content from the extracted list, and (c) descrambling the 
extracted predetermined unit of scrambled content us- 
ing the extracted descrambiing key; and a reproduction 
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unit for reproducing the predetermined unit of descrarn- 
bled content in the descrambled order. 
[001 2] With this construction , the storage information 
in which the list of the descrambling keys is embedded 
and the scrambled content can be received and stored. 
As a result, when reproducing the stored scrambled 
content, a descrambling key required for descrambling 
scrambled content in the predetermined unit can be ex- 
tracted from the list. 

[0013] Therefore, the extraction of the descrambling 
key can be executed in a short time and at low load, 
which improves the performance of particular reproduc- 
tion processes, such as fast forward speed, to a suffi- 
cient level. 

[0014] In the above reception apparatus, the recep- 
tion unit receives one piece of storage information in 
which the list is embedded, the storage unit stores the 
received scrambled content and the one piece of stor- 
age information, and the list extraction unit extracts the 
list from the stored one piece of storage .information. 
[0015] With this construction, the reception apparatus 
can receive and store a piece of storage information in 
which the list of descrambling keys is embedded and 
extract the list from the stored one piece of storage in- 
formation. 

[0016] In the above reception apparatus, the recep- 
tion unit receives a plurality of pieces of storage infor- 
mation in each piece of which a divided portion of the 
list is embedded, the storage unit stores the received 
scrambled content and the plurality of pieces of storage 
information, and the list extraction unit extracts the list 
from the stored plurality of pieces of storage information. 
[00171 With this construction, the reception apparatus 
can receive and store the plurality of pieces of storage 
ECM, in each piece of which a divided portion of the list 
of descrambling keys is embedded, and extract the list 
from the stored plurality of pieces of storage information. 
[0018] in the above reception apparatus, the recep- 
tion unit sequentially receives a transport stream (TS) 
packet including the predetermined unit of scrambled 
content, the storage unit sequentially stores the re- 
ceived TS packet, wherein the descramble processing 
unit includes: a scrambled content extraction unit for ex- 
tracting the predetermined unit of scrambled content 
from one of the TS packets stored in the storage unit, 
and counting the ordinal position of the TS packet from 
the leading TS packet; a descrambling key extraction 
unit for extracting a descrambling key from the list, 
based on the counted ordinal position; and a a descram- 
bling unit for descrambling the extracted predetermined 
unit of scrambled content using the extracted descram- 
bling key. 

[0019] With this construction, the reception apparatus 
counts the number of TS packets from the leading TS 
packet, and can easily extract a descrambling key from 
the list, based on the counted number of TS packets. 
[0020] In the above reception apparatus A, the recep- 
tion unit receives at least one storage Entitlement Con- 



trol Message (ECM) as the at least one piece of storage 
information, the list being embedded -in a portion to be 
encoded in the main body of the ECM , the storage unit 
stores the received storage EGMs, and the list extrac- 

5 tion unit interprets the stored storage ECMs to extract ' 
the list (hereafter called "reception apparatus B"). 
[0021] With this construction, the reception apparatus 
can receive and store the storage ECM, where the list 
is embedded in a portion to be encoded in a main body 

10 of the ECM, and interpret the stored storage ECM to ex- 
tract the list. Therefore, the invention can be realized 
according to the current standard. 
[0022] In the above reception apparatus B, the recep- 
tion unit receives the storage ECMs including identifying 

15 information for distinguishing the storage ECMs from 
another type of ECM. 

[0023] With this construction, the storage ECMs can 
be easily distinguished from another type of ECM, be- 
cause the storage ECMs include identifying information. 

2D [0024] In the above reception apparatus B, the recep- 
tion unit receives the storage ECMs at a time. 
[0025] 'With this construction, the storage ECMs can 
be transmitted at a time. As a result, a load necessary 
to control the transmission timing by the broadcast ap- ; 

25 paratus can be reduced. *' 
[0026] In the above reception apparatus A, the recep- 
tion unit sequentially receives a TS packet including (a) 
the predetermined unit of scrambled content and (b) 
packet specifying Information for specifying an un- 

30 scrambled TS packet, and the storage unit sequentially 
stores the received TS packet, wherein the descramble 
processing unit includes: a scrambled content extrac- 
tion unit for extracting the predetermined unit of scram- 
bled content and the packet specifying information from 

35 one of the TS packets stored in the storage unit; a de- 
scrambling key extraction unit for extracting a descram- 
bling key from the list, based on the extracted packet 
specifying information; and a descrambling unit for de- 
scrambling the extracted predetermined unit of scram- 

40 bled content using the extracted descrambling key. 
[0027] With this construction, the descrambling key 
can be easily extracted from the list, based on the packet 
specifying information. 

[0O28J In the above reception apparatus, the packet 
45 specifying information is one of Continuity Counter 
(CC), the number of TS packets, a cumulative amount 
of data, a relative reproduction time, and a scrambling 
key identifier, the scrambled content extraction unit ex- 
tracts, as the packet specifying information, one of the 
50 Continuity Counter (CC) , the number of TS packets, the 
cumulative amount of data, the relative reproduction 
time, and the scrambling key identifier, and the de- 
scrambling, key extraction unit performs a predeter- 
mined operation to the extracted information as the 
55 packet identifying information to generate a descram- 
bling key identifier, and extracts a descrambling key 
from the list based on the descrambling key identifier. 
[0029] With this construction, the descrambling key 
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identifier is generated by performing the predetermined 
operation to one of the CC, the number of TS packets, 
the cumulative amount of data, the relative reproduction 
time, and the scrambling key identifier. As compared 
with the. case where the value of one of the above-stated 
information is set at the value of the descrambling key 
identifier, the value of the descrambling key identifier be- 
comes difficult to be analyzed by malicious users, which 
improves the security. In addition, the above-stated in- 
formation used in the current standard also can be used, 
and other information which would lead to increase in 
the amount of transmitted data does' not need to be at- 
tached to extract the descrambling key. 
[0030] In the above reception apparatus A, the recep- 
tion unit sequentially receives a TS packet including (a) 
the predetermined unit of scrambled content and (b) un- 
scrambled I picture information, wherein the I picture in- 
formation indicates whether the TS packet correspond- 
ing to the information consists of a portion of an I picture/ 
an I picture or not, and the storage unit sequentially 
stores the received TS packet, wherein the descramble 
processing unit includes: a scrambled content extrac- 
tion unit for, when performing particular reproduction 
processes, extracting the predetermined unit of scram- 
bled content and I picture information from one of the 
TS packets stored in the storage unit; an I picture judge- 
ment unit for judging whether the extracted predeter- 
mined unit of scrambled content consists of a portion of 
an I picture/an I picture or not, based on the extracted I 
picture information; a descrambling key extraction unit 
for extracting a descrambling key from the list, only 
when the extracted predetermined unit of scrambled 
content consists of a portion of an I picture/an 1 picture; 
and a descrambling unit for descrambling the extracted 
predetermined unit of scrambled content using the ex- 
tracted descrambling key. 

[0031 ] With this construction , the reception apparatus 
can reproduce I pictures only. As a result, particular re- 
production processes such as fast forward reproduction 
can be easily conducted. 

[0032] The above reception apparatus A further man- 
aging contract information and consisting of a security 
module whose portion does not effectively function if a 
contract has not been made, and other modules, the re- 
ception apparatus is further made up of: a list holding 
unit for holding the list extracted by the list extraction 
unit, 

wherein the list extraction unit and the list holding unit 
are provided within the security module. 
[0033] With this construction, the list can be stored 
within the security module, which prevents the list from 
being analyzed by malicious users, and therefore im- 
proves the security. 

[0034] Another reception apparatus (hereafter called 
"reception apparatus C") for providing a storage service 
according to the invention is made up of: a reception unit 
for receiving the scrambled content, wherein the scram- 
bled content is scrambled so that a predetermined unit 



of scrambled content, which is a portion of the scram- 
bled content, is descrambled using a descrambling key 
corresponding to the predetermined unit- of scrambled 
content, and a descrambling key is attached to each pre- 

5 determined unit of scrambled content; a storage unit for ■ 
storing the received scrambled content; a list generation 
unit for, when/after storing the received scrambled con- 
tent by the storage unit, generating a list including all 
descrambling keys to be used for descrambling the 

10 scrambled content, based on the descrambling key at- 
tached to each predetermined unit of scrambled con- 
tent; a descramble processing unit for (a) extracting the 
predetermined unit of scrambled content from the stored 
scrambled content, (b) extracting a descrambling key 

'5 corresponding to the extracted predetermined unit of 
scrambled content from the generated list, and (c) de- 
scrambling the extracted predetermined unit of scram- 
bled content using the extracted descrambling key; and 
a reproduction unit for reproducing the predetermined 

20 unit of descrambled content in the descrambled order. 
[0035] With this construction , the reception apparatus 
can receive and store the scrambled content, while gen- 
erating and holding the list of the descrambling keys. As 
a result, when reproducing the stored scrambled con- 

25 tent, a descrambling key required for descrambling the 
predetermined unit of scrambled content can be extract- 
ed from the list 

[0036] Therefore, the extraction of the descrambling 
key can be executed in a short time and at low load, 
30 which improves the performance of particular reproduc- 
tion processes, such as fast forward speed, to a suffi- 
cient level. 

[0037] In the above reception apparatus C, the recep- 
tion unit sequentially receives aTS packet including (a) 

35 the predetermined unit of scrambled content, and (b) 
auxiliary information including a descrambling key and 
information for associating the descrambling key with 
scrambled content, the storage unit sequentially stores 
the received TS packet, and the list generation unit gen- 

40 erates the list, based on the auxiliary information. 

[0038] With this construction, the list can be easily 
generated based on the auxiliary information. 
[0039] In the above reception apparatus, the TS pack- 
et includes an ECM, the auxiliary information being em- 

45 bedded in a portion to be encoded in a main body of the 
ECM. and the list generation unit extracts the auxiliary 
information embedded in the ECM, and generates the 
list based on the auxiliary information. 
[0040] With this construction , the reception apparatus 

so can receive and store the ECM, where the auxiliary in- 
formation is embedded in the portion to be encoded in 
the main body of the ECM, and can interpret the stored 
ECM to generate the list. As a result, the present inven- 
tion can be realized according to the current standard. 

55 [0041] A broadcast apparatus (hereafter called 
"broadcast apparatus A") for providing a storage service 
according to the invention is made up of: an acquisition 
unit for acq uiring content to be scrambled and a plurality 
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of desc rambling keys; a scramble processing unit for 
scrambling a predetermined unit of content out of the 
acquired content so that the predetermined unit of 
scrambled content is descrambled using a descram- 
bling key different for each predetermined unit or each 
set of a plurality of predetermined units; an attaching 
unit for attaching auxiliary information to the predeter- 
mined unit of scrambled content, the auxiliary informa- 
tion consisting of (a) information for identifying the 
scrambled content and (b) a descrambling key corre- 
sponding to the content, and used for having the recep- 
tion apparatus generate a list of the descrambling keys; 
and a broadcast unit for broadcasting the scrambled 
content to which the auxiliary information is added. 
[0042] With this construction, the auxiliary information 
used for having the reception apparatus generate the 
list of the descrambling keys can be attached to the 
scrambled content. As a result, the reception apparatus 
can easily generate the list of the descrambling keys. 
[0043] Therefore, the extraction of the descrambling 
key by the reception apparatus can be executed in a 
short time and at low load, which improves the perform- 
ance of particular reproduction processes, such as fast 
forward speed, to a sufficient level. 
[0044] In the above broadcast apparatus A, the at- 
taching unit embeds the auxiliary information in a portion 
to be encoded in a main body of an ECM and attaches 
the ECM to the predetermined unit of scrambled con- 
tent. 

[0045] With this construction, the broadcast appara- 
tus can attach the ECM to the scrambled content, where 
the auxiliary information is embedded in the portion to 
be encoded in the main body of the ECM. As a result, 
the present invention can be realized according to the 
current standard. 

[0046] Another broadcast apparatus (hereafter called 
"broadcast apparatus B") for providing a storage serv- 
ice, according to the invention,. is made up of: an acqui- 
sition unit for acquiring content to be scrambled and a 
plurality of descrambling keys; a list generation unit for 
generating a list of the descrambling keys; an embed- 
ding unit for embedding the list in at least one piece of 
predetermined information to generate at least one 
piece of storage information; a scramble processing unit 
for scrambling a predetermined unit of content out of the 
acquired content so .that the predetermined unit of 
scrambled content is descrambled using a descram- 
bling key different for each predetermined unit or each 
set of a plurality of predetermined units; and a broadcast 
unit for broadcasting the generated storage information 
and the scrambled content. 

[0047] With this construction, the broadcast appara- 
tus can broadcast the storage information in which the 
list of the descrambling keys is embedded, together with 
the scrambled content. 

[0048] Therefore, the extraction of the descrambling 
key by the reception apparatus can be executed in a 
short time and at low load, which improves the perform- 
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ance of particular reproduction processes, such as fast 
forward speed, to a sufficient level. 
[0049] In the above broadcast apparatus B, the em- 
bedding unit embeds the list in one piece of . predeter- 
5 mined information to generate one piece of storage in- 
formation, and the broadcasting unit broadcasts the 
generated one piece of information and the scrambled 
content. 

[0050] With this construction, the broadcast appara- 
10 tus can generate and broadcast a piece of storage in- 
formation in which the list of all descrambling keys is 
embedded. 

[0051] In the above broadcast apparatus B, the em- 
bedding unit embeds a divided portion of the list in each 
is of a plurality of pieces of predetermined information to 
generate a plurality of pieces of storage information, and 
the broadcasting unit broadcasts the generated 
plurality of pieces of storage information and the scram- 
bled content. 

20 [0052] With this construction, the broadcast appara- 
tus can generate and broadcast a plurality of pieces of 
storage information in each piece of which a divided por- 
tion of the list of descrambling keys is embedded. 
[0053] In the above broadcast apparatus B, the em- 

25 bedding unit embeds the list in a portion to be encoded 
in a main body of at least one ECM to generate at least 
one piece of storage information. 
[0054] With this construction, the broadcast appara- 
tus can. attach the ECM to the scrambled content, 

30 where the list is embedded In the portion to be encoded 
in the main body of the ECM. As a result, the present 
invention can be realized according to the current stand- 
ard. 

[0055] In the above broadcast apparatus B, the 
3s broadcast unit broadcasts one set of the storage infor- 
mation while all the scrambled content corresponding to 
the storage information are broadcast once. 
[0056] This construction can save the amount of data 
transmitted. 

40 [0057] A program used for a reception apparatus for 
providing a storage service according to the invention 
has the reception apparatus conduct the following steps 
of: a reception step for receiving the scrambled content, 
wherein the scrambled content is scrambled so that a 

^5 predetermined unit of scrambled content, which is a por- 
tion of the scrambled content, is descrambled using a 
descrambling key corresponding to the predetermined 
unit of scrambled content, and at least one piece of stor- 
age information in which a list including all descrambling 

50 keys to be used for descrambling the scrambled content 
is embedded; a storage step for storing the received 
scrambled content and the storage information; a list ex- 
traction step for extracting the list from the stored stor- 
age information; a descramble processing step for (a) 

55 extracting the predetermined unit of scrambled content 
from the stored scrambled content, (b) extracting a de- 
scrambling key corresponding to the predetermined unit 
of scrambled content from the extracted list, and (c) de- 
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scrambling the extracted predetermined unit of scram- 
bled content using the extracted descrambling key; and 
a reproduction step for reproducing the predetermined 
unit of descrambied content in the descrambled order. 
[00583 With this construction, .the storage information 
in which the list of the descrambling keys is embedded 
and the scrambled content can be received and stored. 
As a result, when reproducing the stored scrambled 
content, a descrambling key required for descrambling 
scrambled content in the predetermined unit can be ex- 
tracted from the list. 

[0059] Therefore, the extraction of the descrambling 
key can be executed in a short time and at low load, 
which improves the performance of particular reproduc- 
tion processes, such as fast forward speed, to a suffi- 
cient level. 

[0060] Another program according to the invention 
has a reception apparatus for providing a storage serv- 
ice conduct the following steps of: a reception step for 
receiving the scrambled content, wherein the scrambled 
content is scrambled so that a predetermined unit of 
scrambled content, which is a portion of the scrambled 
content, is descrambled using a descrambling key cor- 
responding to the predetermined unit of scrambled con- 
tent, and a descrambling key is attached to each prede- 
termined unit of scrambled content; a storage step for 
storing the received scrambled content; a list generation 
step for, when/after storing the received scrambled con- 
tent in the storage step, generating a list including all 
descrambling keys to be used for descrambling the 
scrambled content, based on the descrambling key at- 
tached to each predetermined unit of scrambled con- 
tent; a descramble processing step for (a) extracting the 
predetermined unit of scrambled content from the stored 
scrambled content, (b) extracting a descrambling key 
corresponding to the extracted predetermined unit of 
scrambled content from the generated list, and (c) de- 
scrambling the extracted predetermined unit of scram- 
bled content using the extracted descrambling key; and 
a reproduction step for reproducing the predetermined 
unit of descrambied content in the descrambled order. 
[0061] With this construction, the reception apparatus 
can receive and store the scrambled content, while gen- 
erating and holding the list of the descrambling keys. As 
a result, when reproducing the stored scrambled con- 
tent, a descrambling key required for descrambling the 
predetermined unit of scrambled content can be extract- 
ed from the list. 

[0062] Therefore, the extraction of the descrambling 
key can be executed in a short time and at low load, 
which improves the performance of particular reproduc- 
tion processes, such as fast forward speed, to a suffi- 
cient level. 

[0063] A program used for a broadcast apparatus for 
providing a storage service according to the invention 
has the broadcast apparatus conduct the following 
steps of: an acquisition step for acquiring content to be 
scrambled and a plurality of descrambling keys; a 



scramble processing step for scrambling a predeter- 
mined unit of content out of the acquired content so that 
the predetermined unit of scrambled content is de- 
scrambled using a descrambling key different for each 
predetermined unit or each set of a plurality of predeter- • 
mined units; an attaching step for attaching auxiliary in- 
formation to the predetermined unit of scrambled con- 
tent, the auxiliary information consisting of (a) informa- 
tion for identifying the scrambled content and (b) a de- 
10 scrambling key corresponding to the content, and used 
for having the reception apparatus generate a list of the 
descrambling keys; and a broadcast step for broadcast- 
ing the scrambled content to which the auxiliary infor- 
mation is added. 
15 [0064] With this construction, the auxiliary information 
used for having the reception apparatus generate the 
list of the descrambling keys can be attached to the 
scrambled content. As a result, the reception apparatus 
can easily generate the list of the descrambling keys. 
20 [0065] Therefore, the extraction of the descrambling 
key by the reception apparatus can be executed in a 
short time and at low load, which improves the perform- 
ance of particular reproduction processes, such as fast 
forward speed, to a sufficient level. 
25 [0066] Another program according to the invention 
has a broadcast apparatus for providing a storage serv- 
ice conduct the following steps of: an acquisition step 
for acquiring content to be scrambled and a plurality of 
descrambling keys; a list generation step for generating 
30 a list of the descrambling keys; an embedding step for 
embedding the list in at least one piece of predetermined 
information to generate at least one piece of storage in- 
formation; a scramble processing step for scrambling a 
predetermined unit of content out of the acquired con- 
35 tent so that the predetermined unit of scrambled content 
is descrambled using a descrambling key different for 
each predetermined unit or each set of a plurality of pre- 
determined units; and a broadcast step for broadcasting 
the generated storage information and the scrambled 
40 content. 

[0067] With this construction, the broadcast appara- 
tus can broadcast the storage information in which the 
list of the descrambling keys is embedded, together with 
the scrambled content. 

45 [0068] Therefore, the extraction of the descrambling 
key by the reception apparatus can be executed in a 
short time and at low load, which improves the perform- 
ance of particular reproduction processes, such as fast 
forward speed, to a sufficient level. 

so [0069] A recording medium, according to the inven- 
tion, on which a program used for a reception apparatus 
for providing a storage service is recorded, the program 
has the reception apparatus conduct the following steps 
of: a reception step for receiving the scrambled content, 

55 wherein the scrambled content is scrambted so that a 
predetermined unit of scrambled content, which is a por- 
tion of the scrambled content, is descrambled using a 
descrambling key corresponding to the predetermined 



6 



11 EP 1 215 905 A2 12 



unit of scrambled content, and at least one piece of stor- 
age information in which a list including all descrambling 
keys to be used for descrambling the scrambled content 
is embedded; a storage step for storing the received 
scrambled content and the storage information; a list ex- 
traction step for extracting the list from the stored stor- 
age information; a descramble processing step for (a) ' 
extracting the predetermined unit of scrambled content 
from the stored scrambled content, (b) extracting a de- 
scrambling key correspond! ng to the predetermined unit 
of scrambled content from the extracted list, and (c) de- 
scrambling the extracted predetermined unit of scram- 
bled content using the extracted descrambling key; and 
a reproduction step for reproducing the predetermined 
unit of descrambied content in the descrambled order 
[0070] With this construction, the storage information 
in which the list of the descrambling keys is embedded 
and the scrambled content can be received and stored. 
As a result, when reproducing the stored scrambled 
content, a descrambling key required for descrambling 
scrambled content in the predetermined unit can be ex- 
tracted from the list. 

[0071] Therefore, the extraction of the descrambling 
key can be executed in a short time and at low load, 
which Improves the performance of particular reproduc- 
tion processes, such as fast forward speed, to a suffi- 
cient level. 

[0072] Another recording medium, according to the 
invention, on which a program used for a reception ap- 
paratus for providing a storage service is recorded, the 
program has the reception apparatus conduct the fol- 
lowing steps of: a reception step for receivingthe scram- 
bled content, 

wherein the scrambled content is scrambled so that a 
predetermined unit of scrambled content, which is a por- 
tion of the scrambled content, is descrambled using a 
descrambling key corresponding to the predetermined 
unit of scrambled content, and a descrambling key is 
attached to each predetermined unit of scrambled con- 
tent; a storage step for storing the received scrambled 
content; a list generation step for, when/after storing the 
received scrambled content in the storage step, gener- 
ating a list including all descrambling keys to be used 
for descrambling the scrambled content, based on the 
descrambling key attached to each predetermined unit 
of scrambled content; a descramble processing step for 
(a) extracting the predetermined unit of scrambled con- 
tent from the stored scrambled content, (b) extracting a 
descrambling key corresponding to the extracted pre- 
determined unit of scrambled content from the generat- 
ed list, and (c) descrambling the extracted predeter- 
mined unit of scrambled content using the extracted de- 
scrambling key; and a reproduction step for reproducing 
the predetermined unit of descrambled content in the 
descrambled order. 

[0073] With this construction, the reception apparatus 
can receive and store the scrambled content, while gen- 
erating and holding the list of the descrambling keys. As 



a result, when reproducing the stored scrambled con- 
tent, a descrambling key required for descrambling the 
predetermined unit of scrambled content can be extract- 
ed from the list 
5 [0074] Therefore, the extraction of the descrambling 
key can be executed in a short time and at low load, 
which improves the performance of particular reproduc- 
tion processes, such as fast forward speed, to a suffi- 
cient level. 

10 [0075] A recording medium, according to the inven- 
tion, on which a program used for a broadcast apparatus 
for providing a storage service is recorded, the program 
has the broadcast apparatus conduct the following 
steps of: an acquisition step for acquiring content to be 

is scrambled and a plurality of descrambling keys; a 
scramble processing step for scrambling a predeter- 
mined unit of content out of the acquired content so that 
the predetermined unit of scrambled content is de- 
scrambled using a descrambling key different for each 

20 predetermined unit or each set of a plurality of predeter- 
mined units; an attaching step for attaching auxiliary in- 
formation to the predetermined unit of scrambled con- 
tent, the auxiliary information consisting of (a) informa- 
tion for identifying the scrambled content and (b) a de- 

25 scrambling key corresponding to the content, and used 
for having the reception apparatus generate a list of the 
descrambling keys; and a broadcast step for broadcast- 
ing the scrambled content to which the auxiliary infor- 
mation is added. 

30 [0076] With this construction, the auxiliary information 
used for having the reception apparatus generate the 
list of the descrambling keys can be attached to the 
scrambled content. As a result, the reception apparatus 
can easily generate the Jist of the descrambling keys. 

35 [0077] Therefore, the extraction of the descrambling 
key by the reception apparatus can be executed in a 
short time and at low load, which improves the perform- 
ance of particular reproduction processes, such as fast 
forward speed, to a sufficient level. 

40 [0078] Another recording medium, according to the 
invention, on which a program used for a broadcast ap- 
paratus for providing a storage service is recorded, the 
program has the broadcast apparatus conduct the fol- 
lowing steps of: an acquisition stepforacquiring content 

^5 to be scrambled and a plurality of descrambling keys; a 
list generation step for generating a list of the descram- 
bling keys; an embedding step for embedding the list in 
at least one piece of predetermined information to gen- 
erate at least one piece of storage information; a scram- 
so ble processing step for scrambling a predetermined unit 
of content out of the acquired content so that the prede- 
termined unit of scrambled content is descrambled us- 
ing a descrambling key different for each predetermined 
unit or each set of a plurality of predetermined units; and 

55 a broadcast step for broadcasting the generated storage 
information and the scrambled content. 
[0079] With this construction, the broadcast appara- 
tus can broadcast the storage information in which the 
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list of the descrambling keys is embedded, together with 
the. scrambled content. 

[0080] Therefore, the extraction of the descrambling 
key by the reception apparatus can be executed in a 
shorttime and at low load, which improves the perform- 
ance of particular reproduction processes, such. as fast 
forward speed, to a sufficient level. 
[0081 ] A recording medium according to the invention 
on which content to be broadcast to a reception appa- 
ratus is recorded, the content a re made up of: scrambled 
content which is scrambled so that a predetermined unit 
of scrambled content, which is a portion of the scram- 
bled content, is descrambled using a descrambling key 
corresponding to the predetermined unit of content, and 
a storage ECM, wherein a list including all descrambling 
keys used for descrambling the scrambled content is 
embedded in a portion to be encoded in a main body of 
at least one ECM. 

[0082] With this construction, the broadcast appara- 
tus can broadcast the ECM, where the list including all 
descrambling keys is embedded in the portion to be en- 
coded in the main body of the ECM. As a result, the ex- 
traction of the descrambling key by the reception appa- 
ratus receiving the content can be executed in a short 
time and at low load, which Improves the performance 
of particular reproduction processes, such as fast for- 
ward speed, to a sufficient level. 
[0083] A method for receiving a storage service ac- 
cording to the invention includes the steps of: a recep- 
tion step for receiving the scrambled content, wherein 
the scrambled content is scrambled so that a predeter- 
mined unit of scrambled content, which is a portion of 
the scrambled content, is descrambled using a de- 
scrambling key corresponding to the predetermined unit 
of scrambled content, and at least one piece of storage 
information in which a list including all descrambling 
keys to be used for descrambling the scrambled content 
is embedded; a storage step for storing the received 
scrambled content and the storage information; a list ex- 
traction step for extracting the list from the stored stor- 
age information; a descramble processing step for (a) 
extracting the predetermined unit of scrambled content 
from the stored scrambled content, (b) extracting a de- 
scrambling key corresponding to the predetermined unit 
of scrambled content from the extracted list, and (c) de- 
scrambling the extracted predetermined unit of scram- 
bled content using the extracted descrambling key; and 
a reproduction step for reproducing the predetermined 
unit of descrambled content in the descrambled order. 
[0084] With this construction, the storage information 
in which the list of the descrambling keys is embedded 
and the scrambled content can be received and stored. 
As a result, when reproducing the stored scrambled 
content, a descrambling key required for descrambling 
scrambled content in the predetermined unit can be ex- 
tracted from the list. 

[0085] Therefore, the extraction of the descrambling 
key can be executed in a short time and at low load, 



which improves the performance of particular reproduc- 
tion processes, such as fast forward speed, to a suffi- 
cient level. 

[0086] Another method for receiving a storage service 
according to- the invention includes the steps of: a re- 
ception step for receiving the scrambled content, where- 
in the scrambled content is scrambled so that a prede- 
termined unit of scrambled content, which is a portion 
of the scrambled content, is descrambled using a de- 
scrambling key corresponding to the predetermined unit 
of scrambled content, and a descrambling key is at- 
tached to each predetermined unit of scrambled con- 
tent; a storage step for storing the received scrambled 
content; a list generation step for, when/after storing the 
received scrambled content in the storage step, gener- 
ating a list including all descrambling keys to be used 
for descrambling the scrambled content, b.ased on the 
descrambling key attached to each predetermined unit 
of scrambled content; a descrambie processing step for 
(a) extracting the predetermined unit of scrambled con- 
tent from the stored scrambled content, (b) extracting a 
descrambling key corresponding to the extracted pre- 
determined unit of scrambled content from the generat- 
ed list, and (c) descrambling the extracted predeter- 
25 mined unit of scrambled content using the extracted de- 
scrambling key; and a reproduction step for reproducing 
the predetermined unit of descrambled content In the 
descrambled order. 

[0087] With this construction, the reception apparatus 
30 can receive and store the scrambled content, while gen- 
erating and holding the list of the descrambling keys. As 
a result, when reproducing the stored scrambled con- 
tent, a descrambling key required for descrambling the 
predetermined unit of scrambled content can be extract- 
35 ed from the list. 

[0088] Therefore, the extraction of the descrambling 
key can be executed in a short time and at low load, 
which improves the performance of particular reproduc- 
tion processes, such as fast forward speed, to a suffi- 
ce cient level. 

[0089] A method for broadcasting a storage service 
according to the invention includes the steps of: an ac- 
quisition step for acquiring content to be scrambled and 
a plurality of descrambling keys; a scramble processing 
45 step for scrambling a predetermined unit of content out 
of the acquired content so that, the predetermined unit 
of scrambled content is descrambled using a descram- 
bling key different for each predetermined unit or each 
set of a plurality of predetermined units; an attaching 
so step for attaching auxiliary information to the predeter- 
mined unit of scrambled content, the auxiliary informa- 
tion consisting of (a) information for identifying the 
scrambled content and (b) a descrambling key corre- 
sponding to the content, and used for having the recep- 
55 tion apparatus generate a list of the descrambling keys; 
and a broadcast step for broadcasting the scrambled 
content to which the auxiliary information is added. 
[0090] With this construction, the auxiliary information 
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used for having the reception apparatus generate the 
list of the descrambling keys can be attached to the 
scrambled content. As a result, the reception apparatus 
can easily generate the list of the descrambling keys. 
[0091] Therefore, the enaction of the descrambling s 
key by the reception apparatus can be executed in a 
short time and at low load, which improves the perform- 
ance of particular reproduction processes, such as fast 
forward speed, to a sufficient level. 

[0092] Another method for broadcasting a storage 10 
service according to the invention includes the steps of: 
an acquisition step for acquiring content to be scrambled 
and a plurality of descrambling keys; a list generation 
step for generating a list ot the descrambling keys; an 
embedding step for embedding the list In at least one is 
piece of predetermined information to generate at least 
one piece of storage information; a scramble processing 
step for scrambling a predetermined unit of content out 
of the acquired content so that the predetermined unit 
of scrambled content is descrambied using a descram- 20 
bling key different for each predetermined unit or each 
set of a plurality of predetermined units; and a broadcast 
step for broadcasting the generated storage information 
and the scrambled content. 

[0093] With this construction, the broadcast appara- 25 
tus can broadcast the storage information in which the 
list of the descrambling keys is embedded, together with 
the scrambled content. 

[0094] Therefore, the extraction of the descrambling 
' key by the reception apparatus can be executed in a 30 
short time and at low load, which improves the perform- 
ance of particular reproduction processes, such as fast 
forward speed, to a sufficient level. 

BRIEF DESCRIPTION OF THE DRAWINGS 35 

[009S] These and the other objects, advantages and 
features of the invention will become apparent from the 
following description thereof taken in conjunction with 
the accompanying drawings which illustrate a specific *o 
embodiment of the invention. 
[0096] In the drawings: 

FIG. 1 is the construction of a system for providing 

a storage service according to the first embodiment 45 

of the invention; 

FIG. 2 shows one example of the data structure of 
a scrambling key list descriptor; 
FIG. 3 shows one example of the data structure of 
an ECM for storage; so 
FIG. 4 shows timing for transmitting the scrambling 
key list; 

FIG. 5 shows the detailed construction of the scram- 
bling process unit 1 03; 

FIG. 6 shows a relation between content and 55 
scrambling keys in a transport stream (TS); 
FIG. 7 shows the scrambling key list associated with 
the TS shown in FIG. 6; ' 



FIG. 8 shows the detailed construction of the de- 
scrambling process unit 204; 
FIG. 9 shows a procedure in the broadcasting proc- 
ess by means of the broadcast apparatus 100 ac- 
cording to the first embodiment of.the invention; 
FIG. 10 shows a procedure in the scrambling proc- 
ess by means of the scrambling process unit 1 03 in 
detail. 

FIG. 11 shows a procedure in the reception and 
storage processes by means of the reception appa- 
ratus 200 and the security module 300 according to 
the first embodiment of the invention; 
FIG. 12 shows a procedure inthe reproduction 
process after the reception and storage processes 
by means of the reception apparatus 200 and the 
security module 300 according to the first embodi- 
ment of the. invention; 

FIG. 13 shows a procedure in the descrambling 
process by means of the descrambling process unit 
204 in detail; 

FIG, 14 is a schematic view showing an image 
stream in the MPEG-2 coding system; 
FIG. 15 shows a TS obtained by converting the im- 
age stream shown in FIG. 14; 
FIG. 16 shows a procedure in the descrambling 
process in the fast-forward reproduction mode in 
detail; 

FIG. 1 7 shows a portion of the construction of a sys- 
tem for providing a storage service according to the 
second embodiment of the invention; 
FIG. 18 shows the detailed construction of the de- 
scrambling process unit 401 ; 
FIG . 1 9 shows a portion of the construction of a sys- 
tem for providing a storage service according to the 
third embodiment of the invention; 
FIG. 20 shows the detailed construction of the 
scrambling process unit 601 ; 
FIG. 21 shows the scrambling key list in the case 
the value of H CC mod 1 6" is set at the scrambling 
key identifier; 

FIG. 22 shows the detailed construction of the de- 
scrambling process unit 701 ; 
FIG. 23 shows a procedure in the broadcasting 
process by means of the broadcast apparatus 600 
according to the third embodiment of the invention; 
FIG. 24 shows a procedure in the scrambling proc- 
ess by means of the scrambling process unit 601 in 
detail; 

FIG. 25 shows a procedure in the reproduction 
process after the reception and storage processes 
by means of the reception apparatus 700 and the 
security module 300 according to the third embod- 
iment of the invention; 

FIG. 26 shows a procedure in the descrambling 
process by means of the descrambling process unit 
701 in detail; 

FIG. 27 shows the construction of a system for pro- 
viding a storage service according to the fourth em- 
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bodiment of the invention; 

FIG. 28 shows one example of the data structure of 
the scrambling key list generation descriptor; 
FIG.. 29 shows one exaripje of the data structure of 
an ECM for normal reproduction,, to which the 5 
scrambling key list generation' descriptor is added; 
FIG. 30 shows the. detailed construction of the 
scrambling process unit 802; 
FIG. 31 shows the detailed construction of the de- 
scrambling process unit 905; 10 
FIG. 32 shows a procedure in the broadcasting 
process by means of the broadcast apparatus 800 
according to the fourth embodiment of the inven- 
tion; 

FIG. 33 shows a procedure in the scrambling proc- is 
ess by means of the scrambling process unit 802 in 
detail; 

FIG. 34 shows a procedure in the reception and 
storage processes by means of the reception appa- 
ratus 900 and the security module 1 000 according 20 
to the fourth embodiment of the invention; 
FIG. 35 shows a procedure in the reproduction 
process after the reception and storage processes 
by means of the reception apparatus 900 and the 
security module 1000 according to the fourth em- 25 
bodiment of the invention; 

F!G. 36 shows a procedure in the descrambling 
process by means of the descrambling process unit 
905 in detail; 

FIG, 37 shows the construction of a system for pro- 30 
viding a storage service according to the fifth em- 
bodiment of the invention; 

FIG. 38 is a schematic diagram showing changes 
in the scrambling keys and timing for updating EC- 
Ms for normal reproduction; 35 
FIG. 39 is a schematic diagram showing changes 
between an even number key and an odd number 
key, and timing for updating ECMs for normal repro- 
duction; 

FIG. 40 shows a transition of the scrambling key list 40 
generated; 

FIG. 41 shows the detailed construction of the de- 
scrambling process unit 1207; 
FIG. 42 shows a procedure in the broadcasting 
process by means of the broadcast apparatus 11 00 45 
according to the fifth embodiment of the invention: 
FIG. 43. shows a procedure in the reception and 
storage processes by means of the reception appa- 
ratus 1200 and the security module 1 300 according 
to the fourth embodiment of the invention; so 
FIG. 44 shows a procedure in the reproduction 
process after the reception and storage processes 
by means of the reception apparatus 1200 and the 
security module 1300 according to the fifth embod- 
iment of the invention; 55 
FIG. 45 shows a procedure in the descrambling 
process by means of the descrambling process unit 
1207 in detail; and 



FIG. 46 shows one example of the data structure of 
an I, picture list descriptor. 

DESCRIPTION OF THE PREFERRED EMBODIMENT 

First Embodiment 

<Summary> 

[0097] A system for providing a storage service ac- 
cording to the first embodiment of the invention consists 
of a broadcast apparatus, a reception apparatus,. and a 
security module. 

[0098] The broadcast apparatus generates a scram- 
bling key list including all of the scrambling keys neces- 
sary for descrambling scrambled content, includes the 
list in an ECM for storage (hereafter called "storage 
ECM"), and broadcasts the scrambled content accom- 
panied with the ECM. 

[0099] The security module, which is integrated with 
the reception apparatus in a predetermined position, re- 
ceives and stores the storage ECM and the scrambled 
content, decodes the ECM for storage in return for the 
paid charges, and sequentially descrambles the re- 
ceived scrambled content using the scrambling key list 
included in the storage ECM. 

<Overall Construction> 

[0100] FIG. 1 shows the construction of the system 
for providing a storage service according to the first em- 
bodiment of the invention. The system shown in FIG. 1 
consists of a broadcast apparatus 100, a reception ap- 
paratus 200, and a security module 300. 
[0101] Note that, in FIG. 1 , a scrambling key recording 
unit 1 0 which records scrambling keys and a content re- 
cording unit 1 1 which records content are shown for ex- 
planation, 

[0102] The security module 300 is a portable and in- 
telligent recording medium such as an IC card. The se- 
curity module 300 is set in a predetermined position of 
the reception apparatus 200 and used together with the 
reception apparatus 200. 

(Construction of Broadcast Apparatus) 

[0103] The broadcast apparatus 100 shown in FIG. 1 
consists of a TS packetizing unit 1 01 , a scrambling key 
list generation unit 102, a scrambling process unit 1 03, 
an ECM generation unit 104, a multiplexing unit 105, a 
content acquisition unit 106, and a scrambling key ac- 
quisition unit 107, 

[0104] The content acquisition unit 1 06 acquires con- 
tent including visual, audio, and text data recorded in 
the content recording unit 11. 

[0105] The TS packetizing unit 101 converts the con- 
tent acquired by the content acquisition unit 106 into 
transport stream (hereafter abbreviated as "TS") pack- 
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ets. 

[01 06] Note that the TS p acket has the fixed length of 
188 bytes as prescribed by the MPEG-2 standard. 
[01 07] The scrambling -key acquisition unit 107 ac- 
quires scrambling keys recorded in the scrambling key 
recording unit 10. 

[01 08] The scrambling key list generation unit 1 02 
• generates a scrambling key list base on the scrambling 
keys acquired by the scrambling key acquisition unit 
107. 

[01 09] Note that the scrambling key list is represented 
by scrambling key list descriptors, for example. 
[0110] FIG. 2 shows one example of the data struc- 
ture of a scrambling key list descriptor. 
[0111] The scrambling key list descriptor shown in 
FIG. 2 includes a scrambling key identifier (Ks_id) for 
identifying a scrambling key, the scrambling key(Ks), 
and the number of TS packets to be scrambled with the 
scrambling key(TS _packet_n umber). In the list, the 
scrambling key identifiers(Ks_Jd), the scrambling keys 
(Ks), and the number of TS packets are described as 
much as the number of scrambling keys. 
[0112] The scrambling process unit 103 scrambles 
the content converted into TS packets by the TS .pack- 
etizlng unit 101 , based on the scrambling key list gen- 
erated by the scrambling key list generation unit 102. 
The detailed description on the scrambling process unit 
1 03 will be given later. 

[01 13] The ECM generation unit 1 04 generates ECMs 
for normal reproduction (hereafter called "normal repro- 
duction ECM"), which are the same as in the conven- 
tional system, and also generates storage ECMs includ- 
ing the scrambling key list generated by the scrambling 
key list generation unit 102. 

[0114] Note that the storage ECM is used for repro- 
ducing the stored scrambled content. 
[0115] FIG. 3 shows one example of the data struc- 
ture of a storage ECM. 

[01 1 6] The storage ECM shown in FIG.3 is generated 
by adding the scrambling key list descriptor as de- 
scribed above to a variable portion (a target to be en- 
coded) in the main body of the ECM as prescribed by 
the ARB (The Association of Radio industries and Busi- 
nesses) standard. 

[0117] In a storage ECM, information for distinguish- 
ing the storage ECM from a normal reproduction ECM 
is also embedded- For instance, different values may be 
set at the table identifiers described in the section head- 
er for the storage ECM and the normal reproduction 
ECM. Alternatively different values may be set at the 
extended table identifiers for the both ECMs, while the 
same value being set at the table identifiers for them. 
[0118] The multiplexing unit 105 attaches/attaches 
the generated normal reproduction ECM with/to the 
scrambled content, multiplexes' it with a storage ECM to 
produce a TS, and broadcasts the TS. 
[0119] The following describes transmission timing 
for the storage ECM. 
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[0120] Since one scrambling key list has only to be 
transmitted for each piece of scrambled content, the 
•storage ECM may be transmitted in a time period longer 
than the transmission period for the conventional ECM. 
■5 [0121] FIG. 4 shows transmission timing for the 
scrambling key list. 

[0122] As shown in FIG. 4, in the BS digital broadcast- 
ing system, the storage ECM may be transmitted in the 
time period approximately ten times as long as for the 

10 conventional ECM. In the environmentwhere ECMs can 
be securely stored without any reception errors and stor- 
age errors, one storage ECM has only to be transmitted 
while all of the scrambled content associated with the 
storage ECM have been transmitted once, 

15 [0123] FIG. 5 shows the detailed construction of the 
scrambling process unit 103. 

[0124] The scrambling process unit 103 shown in FIG. 
5 consists of a TS packet counting unit 1 1 0, a scrambling 
key list holding unit 111, a scrambling unit 112, and a 

so scrambling key list interpretation unit 113. 

[0125] The TS packet counting unit 110 acquires the 
content converted into TS packets by theTS packetizing 
unit 101 one TS packet at a time and passes it to the 
scrambling unit 112. TheTS packet counting unit 110 

25 also counts theTS packet cumulative number indicating 
the ordinal position of the acquired TS packet counted 
from the beginning of the content, and passes the 
number to the scrambling key list interpretation unit 113. 
The TS packet counting unit 110 resets the TS packet 

30 cumulative number into zero when other content starts 
to be processed. 

[0126] The scrambling key list holding unit 111 ac- 
quires the scrambling key list generated by the scram- 
bling. key list generation unit 102 and holds it therein. 

35 [0127] The scrambling key list interpretation unit 113 
extracts the scrambling key corresponding to the TS 
packet to be scrambled from the scrambling key list 
stored in the scrambling key list holding unit 111, based 
on the TS packet cumulative number passed from the 

40 TS packet counting unit 1 1 0, and passes the extracted 
key to the scrambling unit 112. 

[0128] FIG. 6 shows a relation between content and 
scrambling keys in aTS. 

[0129] As shown in FIG. 6, this TS consists of four 
45 hundreds of TS packets obtained by converting content 
to be scrambled. Scrambling keys are changed, every 
one hundred of TS packets. 

[01 30] FIG . 7 shows the scrambling key list associat- 
ed with the TS shown in FIG. 6. 

50 [0131] As shown in FIG. 7, in this scrambling key list, 
the scrambling key associated with the leading one hun- 
dreds of TS packets is Ks1 , the scrambling key associ- 
ated with the TS packets from the 1 01 st to 200 th is Ks2, 
the scrambling key associated with the TS packets from 

55 the 201 st to 300 th is Ks3, and the scrambling key asso- 
ciated with the TS packets from the 301 st to the 400 lh is 
Ks 4. - 
[0132] The scrambling unit 112 scrambles one TS 
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packet passed from the TS packet counting unit 1 1 0 us- 
ing the scrambling key passed from the scrambling key 
list interpretation unit 113 and passes it to the multiplex- 
ing unit 1 05. The scrambling unit 112 repeats this proc- 
ess until all TS packets have been processed. 

(Construction of Reception Apparatus and Security 
Module) 

[0133] The reception apparatus 200 shown in FIG. 1 
consists of a TS separation unit 201, an HDD 202, a 
scrambling key iist holding unit 203, a descrambling 
process unit 204, and a reproduction unit 205. 
[0134] The security module 300 shown in FIG. 1 is 
made up of an ECM interpretation unit 301 . 
[0135] The TS separation unit 201 receives a TS 
broadcast, from the multiplexing unit 1 05, distinguishes 
between a normal reproduction ECM and a storage 
ECM based on the value of the table identifier or the 
extended table identifier, and separates the storage 
ECM and scrambled content. 

[0136] The HDD 202 is a recording medium such as 
a hard disk drive. The HDD 202 stores the storage ECM 
and the scrambled content separated by the TS sepa- 
ration unit 201. 

[0137] The ECM interpretation unit 301 extracts a 
scrambling key list from the storage ECM stored in the 
HDD 202. 

[0138] The scrambling key iist holding unit 203 holds 
the scrambling key list extracted by the ECM interpre- 
tation unit 301 , 

[0139] The descrambling process unit 204 descram- 
bles the scrambled content stored in the HDD 202 based 
on the scrambling key list held by the scrambling key list 
holding unit 203 and passes it to the reproduction unit 
205. Detailed description on the descrambling process 
unit 204 will be given later. 

[0140] The reproduction unit 205 reproduces the de- 
scrambled content. 

[0141] FIG. 8 shows the detailed construction of the 
descrambling process unit 204. 

[0142] The descrambling process unit 204 shown in 
FIG. 8 is made up of a TS packet extraction unit 210, a 
descrambling unit 211, and a scrambling key list inter- 
pretation unit 212. 

[01 43] The TS packet extraction unit 21 0 extracts the 
scrambled content stored in the HDD 202 one TS packet 
at a time to pass it to the descrambling unit 211 . Also, 
the TS packet extraction unit 21 0 counts the TS packet 
index indicating shows the ordinal position of the ex- 
tracted TS packet counted from the beginning of the 
content and passes the index to the scrambling key list 
interpretation unit 212. Here, the TS packet extraction 
unit 21 0 resets the TS packet index into zero when other 
content start to be processed. 

[01 44] The scrambling key list interpretation unit 21 2 
extracts the scrambling key corresponding to the TS 
packet index passed from theTS packet extraction unit 



210 from the scrambling key list held by the scrambling 
key list holding unit 203 and passes It to the descram- 
bling unit 21 1 . 

[0145] The descrambling unit 211 descrambles one 
5 TS packet passed from the TS packet extraction unit 
210 using the scrambling key extracted by the scram- 
bling key list interpretation unit 212 and passes It to the 
reproduction unit 205. The descrambling unit 211 re- 
peats this process until all TS packets have bean proc- 
10 essed. 

<Operations> 

(Operations of Broadcast Apparatus) 

15 

[0146] FIG. 9 shows a procedure in the broadcasting 
process by means of the broadcast apparatus 1 00 ac- 
cording to the first embodiment of the invention. 
[0147] Following describes the outline of the proce- 
20 dure with reference to FIG. 9. 

(1) The content acquisition unit 106 acquires con- 
tent such as image, sounds, and text data recorded 
in the content recording unit 11 (Step S1). 
25 (2) The TS packetizing unit 1 01 converts the con- 
tent acquired by the content acquisition unit 106 into 
TS packets (Step S2). 

(3) The scrambling key acquisition unit 107 ac- 
quires the scrambling key recorded in the scram- 
so bling key recording unit 1 0 (Step S3). 

(4) The scrambling key list generation unit 1 02 gen- 
erates a scrambling key list based on the scram- 
bling key acquired by the scrambling key acquisition 
unit 107 (Step S4). 

35 (5) The scrambling process unit 1 03 scrambles the 
content converted into TS packets by the TS pack- 
etizing unit 101, based on the scrambling key list 
generated by the scrambling key list generation unit 
102 (Step S5). 

40 (6) The ECM generation unit 1 04 generates a nor- 
mal reproduction ECM and generates a storage 
ECM including the scrambling key list generated by 
the scrambling key list generation unit 102 (Step 
S6). 

45 (7) The multiplexing unit 105 associates/attaches 
the generated normal reproduction ECM to/with to 
the scrambled content, multiplexes it with the stor- 
age ECM to generate TS, and broadcasts the TS 
(Step S7). 

50 

[0148] FIG. 10 shows a procedure in the scrambling 
process by means of the scrambling process unit 103 
in detail. 

[0149] Following describes the outline of the detailed 
55 procedure in the scrambling process, with reference to 
FIG. 10. 

(1) The TS packet counting unit 110 resets the TS 
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packet cumulative number into zero (Step S11). 

(2) TheTS packet counting unit 1 1 0 judges whether 
there are unprocessed TS packets or not (Step 
S12). If there are no any unprocessed TS packets, 
the scrambling process > ends. 

(3) If there are unprocessed TS packets, the TS 
packet counting unit 110 acquires one unprocessed 
TS packet to pass it to the scrambling unit 112, and 
counts theTS packet cumulative number.to pass it 
to the scrambling key -list interpretation unit 113 
(StepS 13). 

(4) The scrambling key list interpretation unit 113 
extracts the scrambling key corresponding to the 
TS packet now being processed from the scram- 
bling key list stored in the scrambling key list holding 
unit 111, based on the TS packet cumulative 
number passed from the TS packet counting unit 
110 (Step S1 4). 

(5) The scrambling unit 1 1 2 scrambles oneTS pack- 
et passed trom the TS packet counting unit 11 0 us- 
ing the scrambling key passed from the scrambling 
key list interpretation unit 113 and passes it to the 
multiplexing unit 105. Then, the procedure returns 
upward to process the successive TS packet(Step 
S15). 

(Operations of Reception Apparatus) 

[0150] FIG. 11 shows a procedure in the reception 
and storage processes by means of the reception ap- 
paratus 200 and the security module 300 according to 
the first embodiment of the invention. 
[0151] Following describes the outline of the process- 
es with reference to FIG.. 11 . 

(1) TheTS separation unit 201 receives a TS broad- 
cast from the multiplexing unit 105. Then, the TS 
separation unit 201 distinguishes a normal repro- 
duction ECM and a storage ECM based on the val- 
ue of the table identifier or the extended table iden- 
tifier, and separates the storage ECM and scram- 
bled content (Step S21 ) . 

(2) The HDD 202 stores the storage ECM and the 
scrambled content separated by the TS separation 
unit 201 (Step S22). 

[01 52] Note that, the storage ECM and the scrambled 
content may be separated not at this stage but later (e. 
g., before using them). 

[01 53] FIG. 12 shows a procedure in the reproduction 
process after the reception and storage processes by 
means of the reception apparatus 200 and the security 
module 300 according to the first embodiment of the in- 
vention. 

[0154] Following describes the outline of the proce- 
dure in the reproduction process, with reference to FIG, 
12. 



(1) The ECM interpretation unit 301 extracts the 
scrambling key list from the storage ECM stored in . 
the HDD 202 (Step S31 ), 

(2) The scrambling key list holding unit 203 holds 
5 the scrambling key list extracted by the ECM inter- 
pretation unit 301 (Step S32). 

(3) The descrambling process unit 204 descram- 
bles the scrambled content stored in the HDD 202 
based on the scrambling key list held by the scram- 

10 bling key list holding unit 203 and passes It to the 
reproduction unit 205 (Step S33). 

(4) The reproduction unit 205 reproduces the de- 
scrambled content (Step S34). 

is [0155] FIG. 13 shows a procedure in the descram- 
bling process by means of the descrambling process 
unit 204 in detail, 

[01 56] Following describes the outline of the detailed 
procedure in the descrambling process, with reference 
20 to FIG. 1 3. 

(1 ) The TS packet extraction unit 21 0 resets the TS 
packet index into zero when other content starts to 
be processed (Step S41). 

25 (2) The TS packet extraction unit 21 0 judges wheth- 
er there are unprocessed TS packets or not (Step 
S42). If there are not any unprocessed TS packet, 
the descrambling process ends. 
(3) If there are unprocessed TS packets, the TS 

30 packet extraction unit 210 extracts one unproc- 
essed TS packet to pass it to the descrambling unit 
211 . Also, the TS packet extraction unit 21 0 counts 
the TS packet index to pass it to the scrambling key 
list interpretation unit 212 (Step S43). 

35 (4) The scrambling key list interpretation unit 212 
extracts the scrambling key corresponding to the 
TS packet index passed from theTS packet extrac- 
tion unit 210, from the scrambling key list held by 
the scrambling key list holding unit 203, and passes 

to it to the descrambling unit 211 (Step S44). 

(5) The descrambling unit 211 descrambles one TS 
packet passed from the TS packet extraction unit 
210 using the scrambling key extracted by the 
scrambling key list interpretation unit 212 and pass- 
es es it to the reproduction unit 205. Then, the proce- 
dure returns upward to process the successive TS 
packet (Step S45). 

[0157] Following describes the procedure of the par- 
50 ticular reproduction process after the above-described 
reception and storage processes. 
[0158] FIG. 14 is a schematic view showing an image 
stream in the MPEG-2 coding system. 
[0159] As shown in FIG. 14, according to the MPEG- 
55 2 coding system, the image stream consists of three 
kinds of pictures: I pictures (intraframe-coded picture), 
B pictures (bidirectionalframe), and P pictures (predic- 
tive picture). Among these pictures, only I picture can 
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be drawn and displayed based solely on the data that it 
contains. 

[01 60] Therefore, the fastforward reproduction mode, 
which is one of typical particular reproduction. process- 
es, can be realized by selecting only I pictures to repro-. s 
duce content. 

[0161] FIG. 15 shows a TS obtained by converting the 
image stream shown in FIG. 14. 

[01 62] in FIG. 15, the diagonally shaded portions are 
the TS packets obtained by converting the i pictures 10 
shown in FIG. 1 4. Pictures 11 , 12, 13, and 14 areconverted 
into TSP1 to TSP4, TSP101 to TSP104, TSP201 to 
TSP204, andTSP301 to TSP304, respectively. 
[0163] The procedure of the fast forward reproduc- 
tion, which is one of typical particular reproduction proc- 15 
esses, is almost the same as that of the reproduction 
process shown in FIG. 12. However, the detailed proce- 
dure in the descrambling process by means of the de- 
scrambling process unit 204 is different from that shown 
in FIG. 12. 20 
[0164] FIG. 16 shows a procedure in the descram- 
bling process in the fast-forward reproduction mode in 
detail. Note that the same numerals are assigned to the 
step in which the same processes as in FIG. 1 3 are con- 
ducted, and explanation for them has been omitted. 25 
[01 65] Following describes the outline of the detailed 
procedure in the descrambling process in the fast for- 
ward reproduction mode, with reference to FIGS. 7 and 
13 to 16. 

30 

(1) Same as the step (1) in FIG. 13 (Step S41) 

(2) Same as the step (2) in FIG. 13 (Step S42) 

(3) Same as the step (3) in FIG. 13 (Step S43) 

For instance, when extracting TSP1 shown in 
FIG. 15, the TS packet extraction unit 210 counts 35 
the TS packet index as one, because TSP1 is the 
first packet. 

(4) The descrambling process unit 204 judges 
whether the process is the fast forward reproduction 
process or not (Step S51). If the process is not the 40 
fast forward reproduction process, the procedure 
goes to the process for extracting a scrambling key 

(to Step S44). 

(5) If the process is the fast forward reproduction 
process, the descrambling process unit 204 judges 45 
whether the extracted TS packet is the TS packet 
obtained by converting an I picture or hot (Step 
S52). If the packet is not the TS packet obtained by 
converting an I picture, the procedure returns up- 
ward to process the successive TS packet. so 

Note that, as one method for judging whether 
the extracted TS packet is the TS packet obtained 
by converting an I picture or not, the broadcast ap- 
paratus may embed the information indicative of I 
picture in the unscrambled portion in the TS packet, 55 
and the reception apparatus may make a judge- 
ment based on the information. The Japanese Laid- 
Open Patent Application No, 8-340541 discloses 



such a method. . 

When extracting the TSP1 shown in FIG. 15, 
the descrambling process unit 204 judges the TSP-1 
as the TS packet obtained by converting an I pic- 
ture. 

(6) Same as the step (4) in FIG. 13 (Step S44) 

For instance, the scrambling key list interpreta- 
tion unit 212 extracts, the scrambling key Ks1 cor- 
responding to the TS packet index 1 from the 
scrambling key list shown in FIG. 7. 

(7) Same as the step (5) in FIG. 13 (Step S45) 

[0166] For instance, the descrambling unit 211 de- 
scrambles TSP2 shown in FIG. 15 using the scrambling 
keyKsl. 

[0167] Similarly, TSP1 to TSP4, TSP101 to TSP104, 
TSP201 to TSP204, and TSP301 to TSP304 are de- 
scrambled with the scrambling keys Ks1 , Ks2, Ks3, and 
Ks 4, respectively. 

[0168] Note that, The reverse reproduction process 
can be realized by reversing the extraction order of TS 
packets in the normal reproduction process. 
[0169] In addition, the fast reverse reproduction proc- 
ess can be realized by reversing the extraction order of 
TS packets iri the fast forward reproduction process. 
[0170] Moreover, the random access reproduction 
process can be realized by altering the starting position 
of the TS packet to be extracted. 
[0171] As stated above, according to the first embod- 
iment, various particular reproduction processes can be 
realized by extracting a scrambling key corresponding 
to any one of TS packets from the scrambling key list 
using the TS packet index. 

Embodiment 2 

<Summary> 

[0172] The broadcast apparatus according to the sec- 
ond embodiment of the invention has the same con- 
struction as in the above first embodiment, but the re- 
ception apparatus and the security module have differ- 
ent constructions. 

[0173] The first embodiment is predicted on that infor- 
mation does not leak out of the reception apparatus so 
as to provide adequate security of information and 
therefore the scrambling key list is held in the reception 
apparatus. Whereas, according to the second embodi- 
ment, the scrambling key list is held in the security mod- 
ule and not in the reception apparatus, whereby the se- 
curity against the leakage of the scrambling key list can 
be improved. 

<Overall Construction> 

[0174] FIG. 17 shows a portion of the construction of 
a system for providing a storage service according to 
the second embodiment of the invention. 
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[01 75] The system shown in FIG. 1 7 is made up of a ' 
broadcast apparatus 100, a reception apparatus 400, 
and a security module 500. Note that the broadcast ap- 
paratus is not illustrated in "FIG. 17, because the appa- 
ratus is the same as in the first embodiment. 
[0176] The security module 500 is a portable and in- 
telligent recording medium such as an IC card: The se- 
curity module 500 is set in a predetermined position of 
the reception apparatus 400 and used together with the 
reception apparatus 400. 

[0177] Note that construction elements which have 
the same functions as those in the first embodiment 
have been given the same reference numerals and their 
explanation hasbeen omitted. 

(Construction of Broadcast Apparatus) 

[01 78] The construction of the broadcast apparatus 
has been omitted, because it is the same as in the first 
embodiment. 

(Constructions of Reception Apparatus and Security 
Module) 

[0179] The reception apparatus shown in FIG. 17 is 
made up of a TS separation unit 201 , an HDD 202, a 
descrambling process unit 401 , and a reproduction unit 
205. 

[0180] The security module shown in "FIG. 17 is made 
up of an ECM interpretation unit 301 , a scrambling key 
list holding unit 501 , and a scrambling key list interpre- 
tation unit 502. 

[0181] The scrambling key list holding unit 501 hoids 
the scrambling key list extracted by the ECM interpre- 
tation unit 301 . 

[0182] The descrambling process unit 401 extracts 
the scrambled content stored in the HDD 202 one TS 
packet at a time and counts the TS packet index to pass 
them to the scrambling key list interpretation unit 502. 
Then, on receiving the scrambling key corresponding to 
the TS packet index from the scrambling key list inter- 
pretation unit 502, the descrambling process unit 401 
descrambles the TS packet using the scrambling key 
and passes it to the reproduction unit 205. Detailed de- 
scription on the descrambling process unit 401 will be 
given later. 

[01 83] The scrambling key list interpretation unit 502 
extracts the scrambling key corresponding to the TS 
packet index passed from the descrambling process 
unit 401 , from the scrambling key list held by the scram- 
bling key list holding unit 501 , and passes the extracted 
key to the descrambling process unit 401 . 
[01 84] FIG. 1 8 shows the detailed construction of the 
descrambling process unit 401 . 

[0185] The descrambling process unit 401 shown in 
FIG. 1 8 is made up of the TS packet extraction unit 41 0 
and the descrambling unit 411 . 

[0186] The TS packet extraction unit 41 0 extracts the 



scrambled content stored in the HDD 202 oneTS packet 
at a time to pass it to the descrambling unit 411 . Also, 
the TS packet extraction unit 41 0 counts the TS packet 
index indicating the ordinal position of the extracted TS 
5 packet counted from the beginning of the content and 
passes it to the scrambling key list interpretation unit 
502. Here, the TS packet extraction unit 410 resets the 
TS packet/index into zero when other content start to be 
processed. 

10 [0187] The descrambling unit 411 descrambles one 
TS packet passed from the TS packet extraction unit 
41 0 with the scrambling key passed from the scrambling 
key list interpretation unit and passes it to the reproduc- 
tion unit 205. The descrambling unit 411 repeats this 

15 process until all TS packets have been processed. 

(Operations) 

[0188] Since operations in this embodiment are the 
20 same as in the first embodiment, their explanation has 
been omitted. 

[0189] As described above, according to the second 
embodiment of the invention, various particular repro- 
duction processes can be realized, while improving the 
25 security against the leakage of the scrambling key list 
by extracting a scrambling key corresponding to any one 
of TS packets from the scrambling key list held in the 
security module. 

30 Embodiment 3 

<Summary> 

[0190] According to the third embodiment of the in- 
35 vention, correspondences between TS packets and 
scrambling keys are described in the ECM, and the val- 
ue of Continuity Counter (CC) described in the unscram- 
bled portion in the TS packet is utilized, whereby the 
number of. TS packets to be scrambled 
to (TS_packet_n umber) does not need to be described in 
the scrambling key list descriptor, which leads to de- 
crease in the amount of data to be transmitted. 

<Overall Construction> 

45 

[0191] FIG. 19 shows a portion of the construction of 
a system for providing a storage service according to 
the third embodiment of the invention. 
The system shown in FIG. 1 9 is made up of a broadcast 
50 apparatus 600, a reception apparatus 700, and a secu- 
rity module 300. 

[0192] Note that construction elements which have 
the same functions as those in the first embodiment 
have been given the same reference numerals and their 
55 explanation has been omitted. 
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(Construction of Broadcast Apparatus) 

[0193] The broadcast apparatus shown in FIG. 19 is 
made up of .a TS packetizing unit 101 , a scrambling key 
list generation unit 102, a scrambling process unit.601, 
an ECM generation unit 104, a multiplexing unit 105, a 
content acquisition unit 106, and a scrambling key list 
acquisition unit 107. 

[0194] The scrambling process unit 601 scrambles 
the content converted into TS packets by the TS pack- 
etizing unit 101 based on the scrambling key list gener- 
ated by the scrambling key list generation unit 1 02. 
[01 95] FIG. 20 shows the detailed construction of the 
scrambling process unit 601. 

[0196] • The scrambling process unit 601 shown in FIG. 
20 is made up of a scrambling key identifier calculation 
unit 61 0, a TS packet header interpretation unit 611 , a 
scrambling key list holding unit 612, a scrambling unit 
613, and a scrambling key list interpretation unit 614. 
[0197] The TS packet header interpretation unit 611 
acquires the content converted into TS packets by the 
TS packetizing unit 101 one TS packet at a time to pass 
it to the scrambling unit 613. Also, theTS packet header 
interpretation unit 611 reads the value of Continuity 
Counter (CC) to pass it to the scrambling key identifier 
calculation unit 61 0. 

[0198] Note that the CC is a cyclic counter using the 
four-bit value of the header in the TS packet as pre- 
scribed by the MPEG-2 coding system as the interna- 
tional standard. The CC Increments one by one from ze- 
ro to fifteen, and then returns to zero, which is used to 
determine if any TS packets with the same packet ID 
are abandoned partway. 

[0199] The scrambling key identifier calculation unit 
61 0 calculates a scrambling key identifier using the val- 
ue of the CC passed from the TS packet header inter- 
pretation unit 611 and passes it to the scrambling key 
list interpretation unit 614. 

[0200] One method for calculating a scrambling key 
identifier from the value of the CC is that the value of 
M CC mod n" (where 1 ^n^16) is set at the scrambling 
key identifier. Here, U A mod B u indicates the remainder 
obtained by dividing A by B. 

[0201] For instance, in the case of n= 16, there are six- 
teen kinds of scrambling key identifiers (i.e., 0 to 15). As 
for the TS packet whose value is 2. for example, the 
scrambling key Identifier Is 2, because the remainder 
obtained by dividing 2 by 16 is 2. 
[0202] The scrambling key list holding unit 612 ac- 
quires and holds the scrambling key list generated by 
the scrambling key list generation unit 102. 
[0203] FIG. 21 shows the scrambling key list in the 
case that the value of "CC mod 1 6" is set at the scram- 
bling key identifier. 

[0204] The scrambling key list interpretation unit 614 
extracts the scrambling key corresponding to the TS 
packet to be scrambled from the scrambling key list 
stored in the scrambling key list holding unit 612, based 



on the scrambling key identifier passed from the scram- 
bling key identifier calculation unit 610 and passes it to 
•the scrambling unit 613. 

[0205] For instance, in the case that the scrambling 
5 key identifier is 2, the scrambling key Ks3 is extracted, 
according to the scrambling key list shown in FIG. 21 . 
[0206] The scrambling unit 613 scrambles one TS 
packet passed from the TS packet header interpretation 
unit 611 using the scrambling key passed from the 
10 scrambling key list interpretation unit 614 and passes it 
to the multiplexing unit 1 05. The scrambling unit 613 re- 
peats this process until all TS packets have been proc- 
essed. 

[0207] For instance, in the case that the scrambling 
15 key Ks3 is extracted, scrambling process is conducted 
with the scrambling key Ks3. 

[0208] That is the explanation for the case of n=1 6. 
Naturally, n is not limited to 16. 

[0209] That is, n may be any number between 1 and 
20 15. After generating a scrambling key list by changing 
the value of n, the number of used scrambling keys can 
be easily altered without generating the list again. 
For instance, by changing the value of n to 4 without 
changing the scrambling key list shown in FIG. 21 , the 
25 value of identifier can be any number between 0 and 3. 
As a result, the four types of scrambling keys (Ks1 , Ks2, 
Ks3, and Ks4)can be used. Note that the value of n may 
be stored as a calculation method or a fixed value in 
advance, and the method and the value may be de- 
30 scribed in thevariable portion in the storage ECM shown 
in FIG. 3. 

[0210] Alternatively, instead of calculating a scram- 
bling key identifier from the value of CC, the scrambling 
key Identifier may be calculated from the specific bits of 

35 the Program Clock Reference (PCR) or the Original 
PCR (OPCR), which are also prescribed by the MPEG- 
2 coding system as the international standard. 
[021 1 ] For example, using the specific four-bit values 
in the PCR or OPCR, the scrambling key identifier may 

40 be calculated in the same manner as in the above proc- 
ess using the value of CC. 

[0212] Otherwise, instead of using the value pre- 
scribed by the MPEG-2 coding system, users may di- 
rectly describe the value of the scrambling key identifier 
45 in the area where the application is not specified but 
which users can utilize freely, such as private data area 
in the Adaptation Field. 

(Constructions of Reception Apparatus and Security 
so Module) 

[0213] The reception apparatus shown in FIG. 19 is 
made up of a TS separation unit 201 , an HDD 202, a 
scrambling key list holding unit 203, a descrambling 
55 process unit 701 , and a reproduction unit 205, 

[0214] The descrambling process unit 701 descram- 
bles the scrambled content stored in the HDD 202, 
based on the scrambling key list held by the scrambling 



16 



31 



EP 1 215 905 A2 



32 



key list holding unit 203 and passes it to the reproduction 
unit 205. 

[021 5] FIG. 22 shows the detailed construction of the 
descrambling process unit 701 . 

[0216] The descrambling process" unit 701 shown in 
FIG. 22 is made up of a TS packet extraction unit 710, 
a scrambling key identifier calculation unit 711, a de- 
scrambling unit 712, and a scrambling key list interpre- 
tation unit 713. 

[021 7] The TS packet extraction unit 71 0 extracts the 
scrambled content stored in the HDD 202 oneTS packet 
at a time to pass it to the descrambling unit 712. Also, 
the TS packet extraction unit 71 0 reads the value of the 
CC in the extracted TS packet to pass it to the scram- 
bling key identifier calculation unit 711 . 
[0218] The scrambling key identifier calculation unit 
71 1 calculates a scrambling key identifierfrom the value 
of the CC passed from the TS packet extraction unit 71 0 
and passes it to the scrambling key list interpretation 
unit 713. 

[0219] The scrambling key list interpretation unit 713 
extracts the scrambling key corresponding to the TS 
packet to be scrambled from the scrambling key list 
stored in the scrambling key list holding unit 203, based 
on the scrambling key Identifier passed from the scram- 
bling key identifier calculation unit 711, and passes it to 
the descrambling unit 712. 

[0220] The descrambling unit 712 descrambles one 
TS packet passed from the TS packet extraction unit 
710 using the scrambling key passed from the scram- 
bling key list interpretation unit 713 and passes it to the 
reproduction unit 205. The descrambling unit 712 re- 
peats this process until all TS packets have been proc- 
essed. 

<Operations> 

(Operations of Broadcast Apparatus) 

[0221] FIG. 23 shows a procedure in the broadcasting 
process by means of the broadcast apparatus 600 ac- 
cording to the third embodiment of the invention. Note 
that the same numerals are assigned to the step where 
the same processes as in FIG. 9 are conducted, and 
explanation for them has been omitted. 
[0222] Following describes the outline of the proce- 
dure in the broadcasting process, with reference to FIG, 
23. 

(1) Same as the step (1) in FIG. 9 (Step S1) 

(2) Same as the step (2) in FIG.9 (Step S2) 

(3) Same as the step (3) in FIG.9 (Step S3) 

(4) Same as the step (4) in FIG.9 (Step S4) 

(5) The scrambling process unit 601 scrambles the 
content converted into TS packets by the TS pack- 
etizing unit 101 , based on the scrambling key list 
generated by the scrambling key list generation unit 
102 (Step S51). 



(6) Same as the step (6) in FIG.9 (Step S6) 

(7) Same as the step (7) in FIG. 9 (Step S7) 

[0223] FIG. 24 shows a procedure in the scrambling 
5 process by means of the scrambling process unit 601 
in detail. 

[0224] Following describes the outline of the detailed 
procedure in the scrambling process, with reference to 
FIG. 24. 

10 

(1) The TS packet header interpretation unit 611 
judges whether there are any unprocessed ^TS 
packets or not (Step S61). If there are not any un- 
processed TS packets, the scrambling process 

is ends. 

(2) If there are unprocessed TS packets, the TS 
packet header interpretation unit 611 acquires one 
unprocessed TS packet to pass it to the scrambling 
unit 613, and reads, the value of the CC to pass it 

20 to the scrambling key identifier calculation unit 61 0 
(Step S62). 

(3) The scrambling key identifier calculation unit 
61 0 calculates a scrambling key identifier from the 
value of the CC passed from the TS packet header 

25 interpretation unit 611 to pass It to the scrambling' 
key list interpretation unit 614 (Step S63). 

(4) The scrambling key list interpretation unit 614 
extracts the scrambling key corresponding to the 
TS packet now being processed, from the scram- 
so bling key list stored in the scrambling key list holding 

unit 612, based on the scrambling key identifier 
passed from the scrambling key identifier calcula- 
tion unit 610 and passes the extracted key to the 
scrambling unit 613 (Step S64). 

35 (5) The scrambling unit 613 scrambles one TS 
packet passed from the TS packet header interpre- 
tation unit 611 using the scrambling key passed 
from the scrambling key list interpretation unit 614 
and passes it to the multiplexing unit 1 05. Then, the 

40 procedure returns upward to process the succes- 
sive TS packet(Step S65) 

(Operations of Reception Apparatus) 

45 [0225] Explanation of the procedure in the reception 
and storage processes by means of the reception ap- 
paratus 700 and the security module 300 according to 
the third embodiment of the invention has been omitted, 
because they are the same as in the first embodiment. 

so [0226] FIG. 25 shows a procedure in the reproduction 
process after the reception and storage processes by 
means of the reception apparatus 700 and the security 
module 300 according to the third embodiment of the 
invention. Note that the same numerals are assigned to 

55 the step where the same processes as in FIG. 12 are 
conducted, and explanation for them has been omitted. 
[0227] Following describes the outline of the proce- 
dure in the reproduction process, with reference to FIG. 
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25. 

(1) Same as the step (1) in FIG. 12 (Step S31) 

(2) Same as the step (2) in FIG. 1 2 (Step S32) 

(3) The descrambling process unit 701 descram- 
bies the scrambled content stored in the HDD 202 
based on the scrambling key list held by the scram- 
bling key list holding unit 203 and passes the de- 
scrambled content to the reproduction unit 205 
(Step S71). 

(4) Same as the step (4) in FIG. 12 {Step S34) 

[Q228] FIG. 26 shows a procedure in the descram- 
bling process by means of the descrambling process 
unit 701 in detail. 

[0229] Following describes the outline of the detailed 
procedure in the descrambling process, with reference 
to FIG. 26. 

(1 ) The TS packet extraction unit 71 0 judges wheth- 
er there are any unprocessed TS packets or not 
(Step S81). If there are no any unprocessed TS 
packets, the descrambling process ends. 

(2) If there are unprocessed TS packets, the TS 
packet extraction unit 710 extracts one unproc- 
essed TS packet to pass it to the scrambling unit 
71 2, and reads the value of the CC of the extracted 
TS packet to pass it to the scrambling key identifier 
calculation unit 711 (Step S82). 

(3) The scrambling key identifier calculation unit 71 1 
calculates a scrambling key identifier from the value 
of the CC passed from the TS packet extraction unit 
71 0 and passes it to the scrambling key list inter- 
pretation unit 713 (Step S83). 

(4) The scrambling key list Interpretation unit 713 
extracts the scrambling key from the scrambling key 
list stored in the scrambling key list holding unit 203, 
based on the scrambling key identifier passed from 
the scrambling key identifier calculation unit 711 
and passes the extracted key to the descrambling 
unit 712 (Step S84). 

(5) The descrambling unit 71 2 descrambles oneTS 
packet passed from the TS packet extraction unit 
710 using the scrambling key passed from the 
scrambling key list interpretation unit 71 3 and pass- 
es the descrambled TS packet to the reproduction 
unit 205. Then, the procedure returns upward to 
process the successive TS packet(Step S85). 

[0230] As stated above, according to the third embod- 
iment of the invention, various particular reproduction 
processes can be realized by extracting a scrambling 
key corresponding to any one of TS packets from the 
scrambling key list using the value of CC. 
[0231 ] Note that, instead of the value of CC, any one 
of the number of TS packets, the cumulative amount of 
data, a relative reproduction time, and an identifier for a 
scrambling key may be used. 



Embodiment 4 
<Summary> 

5 [0232] A system for providing a storage service ac- 
cording to the fourth embodiment of the invention con- 
sists of a broadcast apparatus, a reception apparatus, 
and a security module. 

[0233] Unlike the first embodiment, the broadcast ap- 

10 paratus according to the fourth embodiment does not 
generate the scrambling key list. Instead, the broadcast 
apparatus in this embodiment adds auxiliary information 
including identifying information on the scrambled con- 
tent such as packet numbers so as to help the reception 

15 apparatus to generate a scrambling key list, the scram- 
bling keys, and the like, to the normal reproduction ECM 
to broadcast it together with the scrambled content. 
[0234] The security module, which is set and integrat- 
ed with the reception apparatus in a predetermined po- 

20 sitlon, receives the normal reproduction ECM and the 
scrambled content, stores the scrambled content while 
generating a scrambling key list based on the auxiliary 
information added to the normal reproduction ECM, and 
sequentially descrambles the scrambled content using 

25 the stored scrambling key list. 

<Overail Construction> 

[0235] FIG. 27 shows the construction of a system for 
30 providing a storage service according to the fourth em- 
bodiment of the invention. 

[0236] The system shown in PIG. 27 is made up of a 
broadcast apparatus B00, a reception apparatus 900, 
and a security module 1 000. 

35 [0237] The security module 1 000 is a portable and in- 
telligent recording medium such as an IC card. The se- 
curity module 1000 is set in a predetermined position of 
the reception apparatus 900 and used together with the 
reception apparatus 900. 

40 [0238] Note that construction elements which have 
the same functions as those in the first embodiment 
have been given the same reference numerals and the 
same names and their explanation has been omitted. 

45 (Construction of Broadcast Apparatus) 

[0239] The broadcast apparatus 800 shown in FIG. 
27 is made up of a TS packetizing unit 1 01 , an auxiliary 
information generation unit 801, a scrambling process 
so unit B02 r an ECM generation unit 803, a multiplexing unit 
B04, a content acquisition unit 106, and a scrambling 
key acquisition unit 107. 

[0240] The auxiliary information generation unit 801 
generates auxiliary information based on the scrambling 
55 key acquired by the scrambling key acquisition unit 1 07. 
[0241 ] Note that the auxiliary information is represent- 
ed by scrambling key list generation descriptors, for ex- 
ample. 
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[0242] FIG. 28 shows one example of the data struc- 
ture of the scrambling key list generation descriptor. 
[0243] The scrambling key list descriptor shown in 
FIG. 2B includes a scrambling key identifier (Ksjd) for 
identifying a scrambling key, the scrambling key(Ks), 
and the number of TS packets to be scrambled with the 
scrambling key (TS_packet_n umber). . 
[0244] The scrambling process unit 802 scrambles 
the content converted into TS packets by the TS pack- 
etizing unit 1 01 , based on the auxiliary information gen- 
erated by the auxiliary information generation unit 801 . 
The detailed description on the scrambling process unit 
802 will be given later. 

[0245] The ECM generation unit 803 generates a nor- 
ma! reproduction ECM, and adds the auxiliary informa- 
tion generated by the auxiliary inlormation generation 
unit 801 to the normal reproduction ECM. 
[0246] FIG. 29 shows one example of the data struc- 
ture of a norma! reproduction ECM, to which the scram- 
bling key list generation descriptor is added. 
[0247] The normal reproduction ECM shown in FIG. 

29 is generated by adding the scrambling key list gen- 
eration descriptor as described above to a variable por- 
tion (a target to be encoded) in the main body of the 
ECM as prescribed by the ARIB (The Association of Ra- 
dio industries and Businesses) standard. 

[0248] The multiplexing unit 804 associates/attaches 
the scrambled content with/to the generated normal re- 
production ECM to produce a TS, and broadcasts the 
TS. 

[0249] FIG. 30 shows the detailed construction of the 
scrambling process unit B02. 

[0250] The scrambling process unit 802 shown in FIG. 

30 is made up of a TS packet counting unit 81 0, an aux- 
iliary information holding unit 81 1 , a scrambling unit 812, 
and an auxiliary information interpretation unit 813. 
[0251] The TS packet counting unit 81 0 acquires the 
content converted into TS packets by the TS packetizing 
unit 101 one TS packet at a time and passes it to the 
scrambling unit 812. The TS packet counting unit 110 
also counts the TS packet cumulative number showing 
the ordinal position of the acquired TS packet counted, 
from the beginning of the content, and passes the 
number to the auxiliary information interpretation unit 
813. The TS packet counting unit 810 resets the TS 
packet cumulative number into zero when other content 
starts to be processed. 

[0252] The auxiliary information holding unit 811 ac- 
quires and holds the auxiliary information generated by 
.the auxiliary information generation unit 801 . 
[0253] The auxiliary information interpretation unit 
813 extracts the scrambling key corresponding to the 
TS packetto be scrambled from the auxiliary information 
stored in the auxiliary information holding unit 811, 
based on the TS packet cumulative number passed 
from the TS packet counting unit 810, and passes the 
extracted key to the scrambling unit 812. 
[0254] The scrambling unit 812 scrambles one TS 



packet passed from the TS packet counting-unit 810 us- 
ing the scrambling key passed from the auxiliary infor-. 
mation interpretation unit 81 3 and passes the scrambled 
TS packet to the multiplexing unit 804. The scrambling 
5 unit 81 2 'repeats this process until all TS packets: have 
been processed. 

(Constructions of Reception Apparatus and Security 
Module) 

10 

[0255] The reception apparatus 900 shown in FIG. 27 
is made up of a TS separation unit 901 , an HDD 902, a 
scrambling key list generation unit 903, a scrambling 
key list holding unit 904, a descrambling process unit 

15 905, and a reproduction unit 205. 

[0256] The security module 1 000 shown in FIG. 27 is 
made up of an ECM interpretation unit 1001 . 
[0257] The TS separation unit 901 receives the TS 
broadcast by the multiplexing unit 804, and separates a 

so normal reproduction ECM and scrambled content. 

[0258] The HDD 902 is a recording medium such as 
a hard disk drive. The HDD 902 stores the normal re- 
production ECM and the scrambled content separated 
by the TS separation unit 901 . 

25 [0259] The ECM interpretation unit 1 001 extracts aux- 
iliary information from the stored normal reproduction 
ECM. 

[0260] The scrambling key list generation unit 903 
generates a scrambling key list based on the auxiliary 
so information extracted by the ECM interpretation unit 
1001. 

[0261] The scrambling key list holding unit 904 holds 
the scrambling key .list generated by the scrambling key 
list generation unit 903. 

35 [0262] The descrambling process unit 905 descram- 
bles the scrambled content stored in the HDD 202 based 
on the scrambling key list held by the scrambling key list 
holding unit 904, and passes the descrambled content 
to the reproduction unit 205. 

40 [0263] FIG. 31 shows the detailed construction of the 
descrambling process unit 905. 

[0264] the descrambling unit 905 shown in FIG. 31 is 
made up of a TS packet extraction unit 91 0, a descram- 
bling unit 911, and a scrambling key list interpretation 
45 unit 912. 

[0265] The TS packet extraction unit 91 0 extracts the 
scrambledcontent stored in the HDD 902 oneTS packet 
at a time and passes it to the descrambling unit 911. The 
TS packet extraction unit 91 0 also counts the TS packet 

50 index showing the ordinal position of the acquired TS 
packet counted from the beginning of the content, and 
passes the number to the scrambling key list interpre- 
tation unit 91 2. The TS packet extraction unit 910 resets 
the TS packet index into zero when other content starts 

55 to be processed. 

[0266] The scrambling key list interpretation unit 912 
extracts the scrambling key corresponding to the TS 
packet index passed from the TS packet extraction unit 
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91 0 from the scrambling key list held by the scrambling 
key list holding unit 904, and passes the extracted key 
to the descrambling unit 911. 

[0267] The descrambling unit 911 descrambles one 
-TS packet passed from the TS packet extraction unit 
910 using the scrambling key extracted by the scram- 
bling key list interpretation unit 912 and passes the de- 
scrambled TS packet to the reproduction unit 205. The 
descrambling unit 911 repeats this process until all TS 
packets have been processed. 

<Operations> 

(Operations of Broadcast Apparatus) 

[0268] FIG. 32 shows a procedure in the broadcasting 
process by means of the broadcast apparatus BOO ac- 
cording to the fourth embodiment of the invention. 
[0269] Following describes the outline of the proce- 
dure in the broadcast process, with reference to FIG. 32. 



TS packet to pass it to the scrambling unit 81 2, and 
counts the TS packet cumulative number to pass it 
to the auxiliary information interpretation unit 813 
(Step SI 03). 

5 (4) The auxiliary information interpretation unit 81 3 

extracts the scrambling key corresponding to the 
TS packet now being processed from the auxiliary 
information stored in the auxiliary information hold- 
ing unit 811, based on the TS packet cumulative 

10 number passed from the TS packet counting unit 
810 (Step S 104). 

(5) The scrambling unit 812 scrambles one TS 
packet passed from the TS packet counting unit 810 
using the scrambling key passed from the auxiliary 
*5 information interpretation unit 813 and passes it to 
the multiplexing unit 804. Then, the procedure re- 
turns upward to process the successive TS packet 
(Step S105). 

20 (Operations of Reception Apparatus) 



(1) Same as the step (1) in FIG. 9 (Step S1) 

(2) Same as the step (2) in FIG. 9 (Step S2) 

(3) Same as the step (3) in FIG. 9 (Step S3) 

(4) The auxiliary information generation unit 801 25 
generates auxiliary information based on the 
scrambling key acquired by the scrambling key ac- 
quisition unit 107 (Step S91). 

(5) The scrambling process unit 802 scrambles the 
content converted into TS packets by the TS pack- 30 
etizing unit 101 , based on the auxiliary information 
generated by the auxiliary information generation 
unit 801 (Step S92). 

(6) The ECM generation unit 803 generates a nor- 
mal reproduction ECM and adds the auxiliary infor- . 35 
mation generated by the auxiliary information gen- 
eration unit 801 to the normal reproduction ECM 
(Step S93). 

(7) The multiplexing unit 804 associates/attaches 
the generated normal reproduction ECM with/to the 40 
scrambled content to produce TS and broadcasts 
the TS (Step S94). 



[0270] FIG. 33 shows a procedure in the scrambling 
process by means of the scrambling process unit 802 
in detail. 

[0271] Following describes the outline of the detailed 
procedure in the scrambling process, with reference to 
FIG. 33. 

(1) The TS packet counting unit 810 resets the TS 
packet cumulative number into zero (Step S101). 

(2) The TS packet counting unit B10 judges whether 
there are any unprocessed TS packets or not (Step 
S102). If there are no any unprocessed TS packets, 
the scrambling process ends. 

(3) If there are unprocessed TS packets, the TS 
packet counting unit 810 acquires one unprocessed 



[0272] FIG. 34 shows a procedure in the reception 
and storage processes by means of the reception ap- 
paratus 900 and the security module 1000 according to 
the fourth embodiment of the invention. 
[0273] Following describes the outline of the process- 
es with reference to FIG. 34. 

(1 ) The TS separation unit 901 receives aTS broad- 
cast by the multiplexing unit 804. Then, theTS sep- 
aration unit 901 separates a normal reproduction 
ECM and scrambled content (Step S111). 

(2) The HDD 202 stores the normal reproduction 
ECM and the scrambled content separated by the 
TS separation unit 901 (Step S112). 

(3) The ECM interpretation unit 1001 extracts the 
auxiliary information from the normal reproduction 
ECM (Step S1 13). 

(4) The scrambling key list generation unit 903 gen- 
erates a scrambling key list, based on the auxiliary 
information extracted by the ECM interpretation unit 
1001 (Step S114). 

(5) The scrambling key list holding unit 904 holds 
the scrambling key list generated by the scrambling 
key list generation unit 903 (Step S115). 

[0274] Note that, the normal reproduction ECM and 
the scrambled content may be separated not at this 
stage but later (e.g., before using them). 
so [0275] FIG. 35 shows a procedure in the reproduction 
process after the reception and storage processes by 
means of the reception apparatus 900 and the security 
module 1 000 according to the fourth embodiment of the 
invention. Note that the same numerals are assigned to 
55 the step where the same processes as in FIG, 12 are 
conducted, and explanation for them has been omitted, 
[0276] Following describes the outline of the repro- 
duction process, with reference to FIG. 35. 
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(1) The descrambling process unit 905 descram- 
bles the scrambled content stored in the HDD 902 
based on the scrambling key list held by the scram- 
bling key list holding unit 904 and passes the de- 
scrambled content to the reproduction unit 205 
(Step S121). 

(2) Same as the step (4) in FIG; 12 (Step S34) 

[0277] FIG. 36 shows a procedure in the descram- 
bling process by means of the descrambling process 
unit 905 in detail. 

[0278] Following describes the outline of the detailed 
procedure in the descrambling process, with reference 
to FIG. 36. 

(1 ) The TS packet extraction unit 91 0 resets the TS 
packet index into zero when other content starts to 
be processed (Step S131). 

(2) TheTS packet extraction unit 910 judges wheth- 
er there are unprocessed TS packets or not (Step 
S1 32). If there are not any unprocessed TS packet, 
the descrambling process ends. 

(3) If there are unprocessed TS packets, the TS 
packet extraction unit 910 extracts one unproc- 
essed TS packet to pass it to the descrambling unit 
911. Also, the TS packet extraction unit 91 0 counts 
the TS packet index to pass it to the scrambling key 
list interpretation unit 912 (Step S133). 

(4) The scrambling key list interpretation unit 912 
extracts the scrambling key corresponding to the 
TS packet index passed from the TS packet extrac- 
tion unit 91 0, from the scrambling key list held by 
the scrambling key list holding unit 904, and passes 
the extracted key to the descrambling unit 911 (Step 
S134). 

(5) The descrambling unit 911 descrambles oneTS 
packet passed from the TS packet extraction unit 
910 using the scrambling key extracted by the 
scrambling key list interpretation unit 912 and pass- 
es the descrambled TS packet to the reproduction 
unit 205. Then, the procedure returns upward to 
process the successive TS packet (Step S135). 

[0279] In the fourth embodiment, In the case that a 
user has not made a contract to receive the content be- 
fore receiving the content, the generated scrambling key 
list may be encoded and recorded, and then after mak- 
ing the contract the list may be decoded so as to be 
used. Alternatively, instead of generating thescrambling 
key list, all normal reproduction ECMs including auxilia- 
ry information may be stored when receiving the con- 
tent, and then, after making the contract, the ECM inter- 
pretation unit 1001 may extract each piece of auxiliary 
information from all normal reproduction ECMs to gen- 
erate the scrambling key list. 

[0280] As described above, according to the fourth 
embodiment of the invention, various particular repro- 
duction processes can be realized by extracting a 



scrambling key corresponding to any one of TS packets 
from the scrambling key list generated based on the 
auxiliary information when/after storing the scrambled ' 
content or the like ; 
5 [02B1 ] Note here that the auxiliary information may be 
added to a storage ECM. 

Embodiment 5 

io <Summary> 

[0282] A system for providing a storage service ac- 
cording to the fifth embodiment of the invention consists 
of a broadcast apparatus, a reception apparatus, and a 

15 security module. 

[0283] Unlike the first embodiment, the broadcast ap- 
paratus according to the fifth embodiment does not gen- 
■ erate the scrambling key list. The broadcast apparatus 
in this embodiment broadcasts scrambled content to- 

20 gether with normal reproduction ECMs. 

[0284] The security module, which is set and integrat- 
ed with the reception apparatus in a predetermined po- 
sition, receives the normal reproduction ECM and the 
scrambled content, stores the scrambled content while 

25 generating a scrambling key list based on the normal, 
reproduction ECM, and sequentially descrambles the 
scrambled content using the stored scrambling key. list. 

<Overali Constructlon> 

3D 

[0285] FIG. 37 shows the construction of a system for 
providing a storage service according to the fifth embod- 
iment of the invention. 

.[0286] The system shown in FIG. 37 is made up of a 
35 broadcast apparatus 1 1 00, a reception apparatus 1 200, 
and a security module 1300. 

[0287] The security module 1 300 is a portable and in- 
telligent recording medium such as an IC card. The se- 
curity module 1300 is set in a predetermined position of 
to the reception apparatus 1200 and used together with 
the reception apparatus 1200. 

[0288] Note that construction elements which have 
the same functions as those in the first embodiment 
have been given the same reference numerals and their 
45 explanation has been omitted. 

(Construction of Broadcast Apparatus) 

[0289] The broadcast apparatus 1100 shown in FIG. 
so 37 is made up of a TS packetizing unit 1 01 , a scrambling 
process unit 1101, an ECM generation unit "1102, a mul- 
tiplexing unit 1103, a content acquisition unit 106, and 
a scrambling key acquisition unit 107. 
[0290] The scrambling process unit 1101 scrambles 
the content converted into TS packets by the TS pack- 
etizing unit 101 , based on the scrambling key acquired 
by the scrambling key acquisition unit 1 07, Note that ex- 
planation of the scrambling process by the scrambling 
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process unit 1101 has been omitted, because the 
scrambling process is conducted in the. same manner 
as in the current BS digital broadcasting system. 
[0291] The ECM generation unit 1102 generates nor- 
mal reproduction ECMs including scrambling keys ac- 
quired by the scrambling key acquisition unit 107. 
[0292] The multiplexing unit 1103 associates/attach- 
es the generated normal reproduction ECMs with/to the 
scrambled content to produce aTS and broadcasts the 
TS. 

(Constructions of Reception Apparatus and Security 
Module) 

[0293] The reception apparatus shown in FIG. 37 is 
made up of a TS separation unit 1201 , a key changing 
judgement unit 1202, a key update judgement unit 1 203, 
an HDD 1204, a scrambling key list generation unit 
1205, a scrambling key list holding unit 1206, a de- 
scrambling process unit 1207, and a reproduction unit 
205. 

[0294] The security module shown In FIG. 37 is made 

up of an ECM interpretation unit 1301. 

[0295] The TS separation unit 1201 receives a TS 

broadcast by the multiplexing unit 11 03, and separates 

normal reproduction ECMs and scrambled content. 

[0296] Here, scrambling keys are classified into even 

number keys and odd number keys. 

[0297] FIG. 3B is a schematic diagram showing 

changes in the scrambling keys and timing for updating 

normal reproduction ECMs. 

[0298] As shown in FIG. 38, one normal reproduction 
ECM transmits an even number key and an odd number 
key. When updating the normal reproduction ECM, ei- 
ther odd number key or even number key, which is not 
being used, is updated. Therefore, changes in the 
scrambling keys can be detected by the timing of chang- 
es between odd number keys and even number keys. 
[0299] FIG, 39 is a schematic diagram showing 
changes between an even number key and an odd 
number key, and timing for updating normal reproduc- 
tion ECMs. The scrambling control flag (note here that 
this term equals "transport scrambling control" pre- 
scribed in the MPEG-2 standard) shown in FIG. 39 is 
described in the TS packet header, which shows the 
state of the scrambling of the corresponding TS packet 
as follows. That is, in the case that the flag value is "00", 
scrambling is not performed, in the case of the flag value 
is "1 0", scrambling is performed using an even number 
key, and in the case that the flag value is "11 n , scram- 
bling is performed using an odd number key. 
[0300] As shown in FIG. 39, timing for changes be- 
tween even 'number keys and odd number keys can be 
detected by change in the flag value of the scrambling 
control flag (3) and ® in FIG - 39 )- Tne tlmin 9 for up- 
dating of normal reproduction ECMs can be detected by 
the version number of the normal reproduction ECMs 
{© in FIG. 39). 



[0301] The key changing judgement unit 1 202 counts 
the TS packet index indicating the ordinal position of the 
TS packet received by the TS separation unit 1 201 . The 
key changing judgement unit 1202 also checks the 
5 scrambling: control flag in theTS packet header to judge 
whether the scrambling is performed by an even number 
key or an odd number key so as to detect the timing for 
changing in scrambling keys and the timing for ending 
of the storage. 

10 [0302] The . key update judgement unit 1203, firstly, 
has the HDD 1204 store the normal reproduction ECM 
separated by theTS separation unit 1201 therein. Each 
time a normal reproduction ECM is newly separated, the 
key update judgement unit 1203 judges whether the 

is new normal reproduction ECM is the same as the stored 
normal reproduction ECM. In the case that they are not 
the same with each other, the key update Judgement unit 
1203 has the HDD 1204 overwrite the normal reproduc- 
tion ECM stored in the HDD 1204 with the new normal 

20 reproduction ECM. 

[0303] The HDD 1 204 is a recording medium such as 
a hard disk drive. The HDD 1204 stores the scrambled 
content separated by the TS separation unit 1 201 and 
the normal reproduction ECM passed by the key update 

25 Judgement unit 1203. 

[0304] The ECM interpretation unit 1 301 , atthe timing 
for changing scrambling keys detected by the key 
changing judgement unit 1202, extracts the scrambling 
key that has been used until now and the scrambling 

30 key that will be used from now on, from the normal re- 
production ECM stored in the HDD 1204, based on the 
judgement by the key changing judgement unit 1202, 
and passes the scrambling keys to the scrambling key 
list generation unit 1205. 

35 [0305] The scrambling key list generation unit 1205 
generates a scrambling key list, based on theTS packet 
index passed from the key changing Judgement unit 
1202 and the scrambling keys passed from the ECM in- 
terpretation unit 1 301 . 

40 [0306] Following describes the processes for monitor- 
ing changes in scrambling keys and for generating the 
scrambling key list in detail. 

[0307] FIG. 40 shows a transition of the scrambling 
key list generated. 

45 [0308] As shown in FIG. 40, the scrambling key list is 
not updated at the timing of updating a normal repro- 
duction ECM (@ in FIG. 39), but underlined information 
shown in this figure is added thereto at the timing of 
changes between odd number keys and even number 

50 keys© and® ) in FIG. 39). 

[0309] The scrambling key list holding unit 1 206 holds 
the scrambling key list generated by the scrambling key 
list generation unit 1205. 

[0310] The descrambling process unit 1207 descram- 
55 bles the scrambled content stored in the HDD 1204, 
based on the scrambling key list held by the scrambling 
key list holding unit 1206, and passes the descrambled 
content to the reproduction unit 205. 
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[0311] FIG. 41 shows the detailed construction of the 
descrambling unit 1207. 

[031 2] The descrambling process unit 1207 shown in 
FIG. 41 is made up of a TS packet extraction unit 1210, 
a- descrambling unit 1211, and a scrambling key list in- 
terpretation unit 121. 

[0313] The TS packet extraction unit 1210 extracts 
the scrambled content stored in the HDD 1204 one TS 
packet at a time, and passes the extracted content to 
the descrambling unit 1211 . The TS packet extraction 
unit 121 0 also counts the TS packet index indicating the 
ordinal position of the extracted TS packet counted from 
the beginning of the content, and passes the TS packet 
index to the scrambling key list interpretation unit 1212. 
The TS packet extraction unit 1 21 0 resets the TS packet . 
index into zero when other content starts to be proc- 
essed. 

[031 4] The scrambling key list interpretation unit 1 212 
extracts the scrambling key corresponding to the TS 
packet index passed from the TS packet extraction unit 
1210, from the scrambling key list held by the scram- 
bling key list holding unit 1204, and passes the extracted 
key to the descrambling unit 1211 . 
[0315] The descrambling unit 1211 descrambies one 
TS packet passed from the TS packet extraction unit 
1210 using the scrambling key extracted by the scram- 
bling key list interpretation unit 1212, and passes the 
descrambled TS packet to the reproduction unit 205. 
The descrambling unit 1211 repeats this process until 
ail TS packets have been processed, 

<Operations> 

(Operations of Broadcast Apparatus) 

[031 6] FIG. 42 shows a procedure in the broadcasting 
process by means of the broadcast apparatus 11 00 ac- 
cording to the fifth embodiment of the invention. Note 
that the same numerals are assigned to the step where 
the same processes as in FIG. 9 are conducted, and 
explanation for them has been omitted. 
[0317] Following describes the outline of the proce- 
dure in the broadcastprocess, with reference to FIG. 42. 

(1) Same as the step (1) in FIG. 9 (Step S1) 

(2) Same as the step (2) in FIG. 9 (Step S2) 

(3) Same as the step (3) in FIG. 9 (Step S3) 

(4) The scrambling process unit 11 01 scrambles the 
content converted into TS packets by the TS pack- 
etizing unit 101, based on the scrambling key ac- 
quired by the scrambling key acquisition unit 107 
(StepS141). 

(5) The ECM generation unit 1 1 02 generates a nor- 
mal reproduction ECM including the scrambling key 
acquired by the scrambling key acquisition unit 1 07 
(Step S142). 

(6) The multiplexing unit 11 03 associates/attaches 
the generated normal reproduction ECM with/to the 



scrambled content tD produce a TS and broadcasts 
.theTS (Step S 143). 

(Operations of Reception Apparatus) 

[0318] FIG. 43 shows a procedure in the reception 
and storage processes by means of the reception ap- 
paratus 1200 and the security module 1.300 according 
to the fourth embodiment of the invention. 
[0319] Following describes the outline of the proce- 
dure in the reception and storage processes, with refer- 
ence to FIG. 43. 

(1) TheTS separation unit 1201 receives the first 
TS packet broadcast by the multiplexing unit 1103, 
and separates a normal reproduction ECM and 
scrambled content (Step S151). 

(2) The key update judgement unit 1203 has the 
HDD 1204 store the normal reproduction ECM of 
the first TS packet separated by the TS separation 
unit 1201 therein (Step S152). 

(3) The key changing Judgement unit 1202 judges 
whether or not to complete the reception and stor- 
age processes (Step S153). 

(4) If the reception and storage processes should 
not be completed, the TS separation unit 121 re- 
ceives the following one TS packet broadcast by the 
multiplexing unit 1103, and separates a normal re- 
production ECM. and scrambled content (Step 

5154) . 

(5) The HDD 1204 stores the scrambled content 
separated by the TS separation unit 1201 (Step 

5155) . 

(6) The key changing judgement unit 1202 counts 
the TS packet index indicating the ordinal position 
of the TS packet received by the TS separation unit 
1201 . The key changing judgement unit 1202 also 
checks the scrambling control flag in theTS packet 
header to judge whether the scrambling is per- 
formed by an even number key or an odd number 
key (Step S156). 

(7) The key changing judgement unit 1202 judges 
whether it is the timing for changing scrambling 
keys or not (Step S157). 

(8) if it is the timing for changing scrambling keys, 
the key changing judgement unit 1202 passes the 
counted TS packet index to the scrambling key list 
generation unit 1205 (Step S158). 

(9) The ECM interpretation unit 1301 extracts the 
scrambling key extracts the scrambling key that has 
been used until now and the scrambling key that will 
be used from now on, from the normal reproduction 
ECM stored in the HDD 1204, based on the judge- 
ment by the key changing judgement unit 1 202, and 
passes the scrambling keys to the scrambling key 
list generation unit 1205 (Step S159). 

(10) The scrambling key list generation unit 1205 
updates the scrambling key list, based on the TS 
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packet index passed from the key changing judge- 
ment unit 1202 and the scrambling keys passed 
from the ECM interpretation unit 13 Oi (Step 
S1510). 

(11) The . key update judgement unit 1203 judges s 
whetherthe normal reproduction ECM separated by 
the TS separation unit 1202 is the same as the 
stored normal reproduction ECM (Step SI 511). If 
they are the same with each other, the procedure 
returns upward (to Step S153) to process the sue- to 
cessiveTS packet (Step S1512). 

(12) If they are not the same with each other, the 
key update judgement unit 1203 has the HDD 1204 
overwrite the normal storage ECM stored therein 
with the new normal reproduction ECM. Then, the *5 
procedure returns upward (to Step S153) to proc- 
ess the successive TS packet (Step S1512) 

(13) If the reception and storage processes should 
be completed, the key changing judgement unit 

1 202 passes the counted TS packet index to the 20 
scrambling key list generation unit 1205 (Step 
S1513). 

(14) The scrambling key list generation unit 1205 
updates the scrambling key list, based on the TS 
packet index passed from the key changing judge- 25 
ment unit 1202 to complete the scrambling key list 
(Step S1 514). 

(15) The scrambling key list holding unit 1 206 holds 
the scrambling key list generated by the scrambling 
key list generation unit 1205 (Step S1515). 30 

[0320] in the case that the reception and storage proc- 
esses are completed without any changes in scrambling 
keys, the ECM interpretation unit 1301 extracts the 
scrambling key that has been used until now from the 35 
norma! reproduction ECM stored in the HDD 1204, 
based on the judgement by the key changing judgement 
unit 1202, and passes the extracted key to the scram- 
bling key list generation unit 1205. Then, the scrambling 
key list generation unit 1 205 updates the scrambling key *o 
list, based on the TS packet index passed from the key 
changing judgement unit 1202 and the scrambling key 
passed from the ECM interpretation unit 1301 to com- 
plete the scrambling key list, 

[0321] In addition, instead of separating normal repro- 4* 
duction ECM and scrambled content from each other 
when receiving them, butthey may be separated before 
using to generate the scrambling key list. 
[0322] FIG. 44 shows a procedure in the reproduction 
process after the reception and storage processes by so 
means of the reception apparatus 1200 and the security 
module 1300 according to the fifth embodiment of the 
invention. Note that the same numerals are assigned to 
the step where the same processes as in FIG. 12 are 
conducted, and explanation for them has been omitted, ss 
[0323] Following describes the outline of the proce- 
dure in the reproduction process, with reference to FIG. 
44. 



(1) The descrambling process unit 1205 descram- 
btes the scrambled content stored in the HDD 1204, 
based on the scrambling key list held by the scram- 
bling key list holding unit 1206, and passes the de- 
scrambled content to the reproduction unit 205 
(StepS161). 

(2) Same as the step (4) in FIG. 12 (Step S34) 

[0324] FIG. 45 shows a procedure in the descram- 
bling process by means of the descrambling process 
unit 1207 in detail. 

[0325] Following describes the outline of the detailed 
procedure in the descrambling process, with reference 
to FIG. 45. 

(1) The TS packet extraction unit 1210 resets the 
TS packet index into zero when other content starts 
to be processed (Step S171). 

(2) The TS packet extraction unit 1210 judges 
whether there are unprocessed TS packets or not 
(Step S172). If there are not any unprocessed TS 
packet, the descrambling process ends. . 

(3) If there are unprocessed TS packets, the TS 
packet extraction unit 1210 extracts one unproc- 
essed TS packet to pass It to the descrambling unit 
1211. Also, the TS packet extraction unit 1210 
counts the TS packet index to pass it to the scram- 
bling key list interpretation unit 1212 (Step S173). 

(4) The scrambling key list interpretation unit 1212 
extracts the scrambling key corresponding to the 
TS packet index passed from the TS packet extrac- 
tion unit 1210, from the scrambling key list held by 
the scrambling key list holding unit 1 204 and passes 
the extracted key to the descrambling unit 1211 
(StepS 174). 

(5) The descrambling unit 1211 descrambles one 
TS packet passed from the TS packet extraction 
unit 1210 using the scrambling key extracted by the 
scrambling key list interpretation unit 1212 and 
passes the descrambled TS packet to the reproduc- 
tion unit 205. Then, the procedure returns upward 
to process the successive TS packet (Step S175). 

[0326] In the fifth embodiment, in the case that a user 
has not made a contract to receive the content before 
receiving the content, the generated scrambling key list 
may be encoded and recorded, and after making the 
contract the list can be decoded so as to be used. Alter- 
natively, instead of generating the scrambling key list, 
all normal reproduction ECMs may be stored when re- 
ceiving the content, and then, after making the contract, 
the ECM interpretation unit 1001 may generate the 
scrambling key list from all the normal reproduction EC- 
Ms. 

[0327] As described above, according to the fifth em- 
bodiment of the invention, various particular reproduc- 
tion processes can be realized by extracting a scram- 
bling key corresponding to any one of TS packets from 
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the scramb ling key list g enerate d when/after storing 
scrambled content or the like. 

[0328] Further, in order to improve the speed of the 
particular. reproduction processes realized by selective- 
ly reproducing I pictures only, the I picture as a target 
may be extracted based on an I picture list, where the I 
picture iist is generated in the same manner for gener- 
ating the scrambling key list in the above-described em- 
bodiments. 

[0329] The I picture list is represented by an I picture 
list descriptor, for example. 

[0330] FIG. 46 shows one example of the data struc- 
ture of an I picture list descriptor. 
[0331] The I picture list descriptor shown in FIG. 46 
includes an I picture identifier (tpicjd) for identifying I 
pictures, the number of TS packets counted from the 
beginning of the file which indicates the position of the 
first packet of the 1 picture (first_packet_position), and 
the number of TS packets counted form the beginning 
of the file which indicates the position of the last packet 
of the I picture (last_packet_position). In the list, the i 
picture identifiers (Ipicjd), the number of TS packets 
(first__packet__position) f and the number of TS packets 
(last_packet_position) are described as much as the 
number of i pictures. 

(Modifications) 

[0332] In some of the above-described embodiments, 
the scrambling key list is delivered by the same route as 
that for the scrambled content. However, the scrambling 
key list may be delivered by another route, for example, 
by recording the list onto recording media such as a 
CD-ROM and delivering the recording media, or by 
means of another communication method such as the 
Internet and telephone. 

[0333] In some of the above-described embodiments, 
the TS packet corresponding to the scrambling key is 
specified based on the number of TS packets. However, 
the TS packet may be specified by another method. For 
example, this may be based on the cumulative amount 
of data in the TS packet, a relative reproduction time 
from the beginning of the content. Alternatively, the TS 
packet may be specified by an identifier for the scram- 
bling key, which is embedded for each TS packet in ad- 
vance. 

[0334] tn each of the above-described embodiments, 
the scrambling keys are acquired from the database in 
the broadcast station. However, the scrambling keys 
may be generated before scrambling process. 
[0335] Each of the above-described embodiments, 
does not especially limit the timing for generating the 
scrambling key list. For instance, at the side of the 
broadcast apparatus, the list may be generated before 
scrambling, at the time of scrambling, or after scram- 
bling. At the side of the reception apparatus, the list may 
be generated at any time before using the list in the de- 
scrambling process. 



[0 336] Bes i des, computer programs to have a com - 

puter execute the procedure of the above-described 
embodiments may be recorded on computer-readable 
recording media or may be directly transferred on the 

5 network to be distributed and sold. 

[0337] These recording media can be, for example, 
removable recording media such as a floppy disk, a 
compact disk, a magnet optical disk, a DVD disk, and a 
memory card and fixed recording media such as hard 

10 disk, semiconductor memory. 

[0338] Although the present invention has been fully 
described by way of examples with reference to the ac- 
companying drawings, It is to be noted that various 
changes and modifications will be apparent to those 

15 skilled In the art. Therefore, unless such changes and 
modifications depart from the scope of the present in- 
vention, they should be construed as being included 
therein. 

20 

Claims 

1. A reception apparatus which receives and repro- 
duces scrambled content, comprising: 

25 

reception means for receiving the scrambled 
content, wherein the scrambled content is 
scrambled so that a predetermined unit of 
scrambled content, which is a portion of the 

30 scrambled content, is descrambled using a de- 

scrambling key corresponding to the predeter- 
mined unit of scrambled content, and at least 
one piece of storage information in which a iist 
including all descrambling keys to be used for 

35 descrambling the scrambled content is embed- 

ded; 

storage means for storing the received scram- 
bled content and the storage information; 
list extraction means for extracting the list from 

40 the stored storage information; 

descramble processing means for (a) extract- 
ing the predetermined unit of scrambled con- 
tent from the stored scrambled content, (b) ex- 
tracting a descrambling key corresponding to 

45 the predetermined unit of scrambled content 

from the extracted list, and (c) descrambling the 
extracted predetermined unit of scrambled con- 
tent using the extracted descrambling key; and 
reproduction means for reproducing the prede- 

so termined unit of descrambled content in the de- 

scrambled order. 

2. The reception apparatus of Claim 1 , wherein 

55 the reception means receives one piece of stor- 

age information in which the list is embedded, 
the storage means stores the received scram- 
bled content and the one piece of storage infor- 
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mation, and 

the list extraction means extracts the list.from 
. the stored one piece of. storage information, 

3. The- reception apparatus of Claim 1 , wherein s. 

the reception means receives a plurality of 
pieces of storage information in each piece of which 
a divided portion of the fist is embedded, 

the storage means stores the received scram- 
bled content and the plurality of pieces of storage 10 
information, and 

the list extraction means extracts the list from 
the stored plurality of pieces of storage information. 

4. The reception apparatus of Claim 1 , wherein « 

the reception means sequentially receives a 
transport stream (TS) packet including the prede- 
termined unit of scrambled content, 

the storage means sequentially stores the re- 
ceived TS packet, wherein 20 

the descramble processing means includes: 

scrambled content extraction means for ex- 
tracting the predetermined unit of scrambled 
content from one of the TS packets stored in 25 
the storage means, and counting the ordinal 
position of the TS packet from the leading TS 
packet; 

descrambiing key extraction means for extract- 
ing a descrambiing key from the list, based on 30 
the counted ordinal position; and 
descrambiing means for descrambiing the ex- 
tracted predetermined unit of scrambled con- 
tent using the extracted descrambiing key. 

35 

5. The reception apparatus of Claim 1 , wherein 

the reception means receives at least one 
storage Entitlement Control Message (ECM) as the 
at least one piece of storage Information, the list be- 
ing embedded in a portion to be encoded in the main 40 
body of the ECM, the storage means stores 
the received storage ECMs, and the list ex- 
traction means interprets the stored storage ECMs 
to extract the list. 

45 

6. The reception apparatus of Claim 5, wherein 

the reception means receives the storage EC- 
Ms including identifying information for distinguish- 
ing the storage ECMs from another type of ECM. 

50 

7. The reception apparatus of Claim 5, wherein 

the reception means receives the storage EC- 
Ms at a time. 

8. The reception apparatus of Claim 1 , wherein 55 

the reception means sequentially receives a 
TS packet including (a) the predetermined unit of 
scrambled content and (b) packet specifying infor- 



mation for specifying an unscrambled TS packet, 
and 

. the storage means sequentially stores the re- 
ceived TS packet, wherein the descramble process- 
ing means includes: 

scrambled content extraction means for ex- 
tracting the predetermined unit of scrambled 
content and the packet specifying information 
from one of the TS packets stored in the storage 
means; 

descrambiing key extraction means for extract- 
ing a descrambiing key from the list, based on 
the extracted packet specifying information; 
and 

descrambiing means for descrambiing the ex- 
tracted predetermined unit of scrambled con- 
tent using the extracted descrambiing key. 

i. The reception apparatus of Claim 8, wherein 

the packet specifying information is one of 
Continuity Counter (CC), the number of TS packets, 
a cumulative amount of data, a relative reproduction 
time, and a scrambling key identifier, the 
scrambled content extraction means extracts, as 
the packet specifying information, one of the Conti- 
nuity Counter (CC), the number of TS packets, the 
cumulative amount of data, the relative reproduc- 
tion time, and the scrambling key identifier, and 
the descrambiing key extraction means per- 
forms a predetermined operation to the extracted 
information as the packet identifying information to 
generate a descrambiing key identifier, and extracts 
a descrambiing key from the list based on the de- 
scrambling key identifier. 

10. The reception apparatus of Claim 1, wherein 

the reception means sequentially receives a 
TS packet including (a) the predetermined unit of 
scrambled content and (b) unscrambled I picture in- 
formation, wherein the I picture information indi- 
cates whether the TS packet corresponding to the 
information consists of a portion of an I picture/an I 
picture or not, and 

the storage means sequentially stores the re- 

— > — * r— —■""-*! •*■»—•—•« 

the descramble processing means includes: 

scrambled content extraction means for, when 
performing particular reproduction processes, 
extracting the predetermined unit of scrambled 
content and I picture information from one of 
the TS packets stored in the storage means; 
I picture judgement means for judging whether 
the extracted predetermined unit of scrambled 
content consists of a portion of an ) picture/an 
I picture or not, based on the extracted I picture 
information; 
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TS packet including (a) the predetermined unit of 
scrambled content, and (b) auxiliary information in- 
cluding a descrambiing key and information for as- 
sociating the descrambiing key with scrambled.con- 
5 tent, 

the storage means sequentially stores the re- 
ceived TS packet, and 

the list generation means generates the list, 
based on the auxiliary information. 



descrambiing key extraction means'for extract- 
ing a descrambiing key from the list, only when 
the extracted predetermined unit of scrambled 
content consists of a portion of an I picture/an 
I picture; and 

descrambiing means for descrambiing the ex- 
tracted predetermined unit of. scrambled con- 
. tent using the extracted descrambiing key. 

11. The reception apparatus of Claim 1 -further manag- 
ing contract information and consisting of a security 
module whose portion does not effectively function 
if a contract has not been made, and other modules, 
the reception apparatus further comprising: 

list holding means for holding the list extracted 
by the list extraction means, 

wherein the list extraction means and the list 
holding means are provided within the security 
module. 

12. A reception apparatus which receives and repro- 
duces scrambled content, comprising: 

reception means for receiving the scrambled 
content, wherein the scrambled content is 
scrambled so that a predetermined unit of 
scrambled content, which Is a portion of the 
scrambled content, is descrambled using a de- 
scrambling key corresponding to the predeter- 
mined unit of scrambled content, and a de- 
scrambiing key is attached to each predeter- 
mined unit of scrambled content; 
storage means for storing the received scram- 
bled content; 

list generation means for, when/after storing 
the received scrambled content by the storage 
means, generating a list including all descram- 
biing keys to be used for descrambiing the 
scrambled content, based on the descrambiing 
key attached to each predetermined unit of 
scrambled content; 

descramble processing means for (a) extract- 
ing the predetermined unit of scrambled con- 
tent from the stored scrambled content, (b) ex- 
tracting a descrambiing key corresponding to 
the extracted predetermined unit of scrambled 
content from the generated list, and (c) de- 
scrambling the extracted predetermined unit of 
scrambled content using the extracted de- 
scrambling key; and 

reproduction means for reproducing the prede- 
termined unit of descrambled content in the de- 
scrambled order. 

13. The reception apparatus of Claim 12, wherein 

the reception means sequentially receives a 



1 4. The reception apparatus of Claim 1 3, wherein 

theTS packet includes an ECM, the auxiliary 
information being embedded in a portion to be en- 
coded in a main body of the ECM, and 
is the list generation means extracts the auxilia- 

ry information embedded in the ECM, and gener- 
ates the list based on the auxiliary information. 

15. A broadcast apparatus which scrambles content 
20 and broadcasts the scrambled content to a recep- 
tion apparatus, the broadcast apparatus compris- 
ing: 

acquisition means for acquiring content to be 
scrambled and a plurality of descrambiing keys; 
scramble processing means for scrambling, a 
predetermined unit of content out of the ac- 
quired content so that the predetermined unit 
of scrambled content is descrambled using a 
descrambiing key different for each predeter- 
mined unit or each set of a plurality of predeter- 
mined units; 

attaching means for attaching auxiliary infor- 
mation to the predetermined unit of scrambled 
content, the auxiliary information consisting of 
(a) information for identifying the scrambled 
content and (b) a descrambiing key corre- 
sponding to the content, and used for having 
the reception apparatus generate a list of the 
descrambiing keys; and 
broadcast means for broadcasting the scram- 
bled content to which the auxiliary Information 
is added. 

16. The broadcast apparatus of Claim 15, wherein 
the attaching means embeds the auxiliary in- 
formation in a portion to be encoded in a main body 
of an ECM and attaches the ECM to the predeter- 
mined unit of scrambled content. 

17. A broadcast apparatus which scrambles content 
and broadcasts the scrambled content to a recep- 
tion apparatus, the broadcast apparatus compris- 

. ing: 

acquisition means for acquiring content to be 
scrambled and a plurality of descrambiing keys; 
list generation means for generating a list of the 
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descrambling keys;, 
embedding means for embedding the list in at 
least one piece of predetermined Information to 
generate at least one piece of storage, informa- 
tion; 5 
scramble processing means for scrambling a 
predetermined unit of content out of the ac- 
quired content so that the predetermined unit 
of scrambled content is descrambled using a 
descrambling key different for each predeter- 10 
mined unit or each set of a plurality of predeter- 
mined units; and 

broadcast means for broadcasting the generat- 
ed storage information and the scrambled con- 
tent. 15 

18. The broadcast apparatus of Claim 17, wherein 

~~ the embedding means embeds the list in one 
piece of predetermined information to generate one 
piece of storage information, and 20 

the broadcasting means broadcasts the gen- 
erated one piece of information and the scrambled 
content. 

19. The broadcast apparatus of Claim 17, wherein 25 

the embedding means embeds a divided por- 
tion of the list in each of a plurality of pieces of pre- 
determined information to generate a plurality of 
pieces of storage information, and 

the broadcasting means broadcasts the gen- 30 
erated plurality of pieces of storage information and 
the scrambled content. 

20. The broadcast apparatus of Claim 17, wherein 

the embedding means embeds the fist in a 
portion to be encoded in a main body of at least one 
ECM to generate at least one piece of storage in- 
formation. 

21 . The broadcast apparatus of Claim 1 7, wherein 

the broadcast means broadcasts one set of 
the storage information while all the scrambled con- 
tent corresponding to the storage information are 
broadcast once. 

22. A program used tor a reception apparatus which re- 
ceives and reproduces scrambled content, the pro- 
gram has the reception apparatus conduct the fol- 
lowing steps of: 

a reception step for receiving the scrambled 
content, wherein the scrambled content is 
scrambled so that a predetermined unit of 
scrambled content, which is a portion of the 
scrambled content, is descrambled using a de- 
scrambling key corresponding to the predeter- 
mined unit of scrambled content, and at least 
one piece of storage information in which a list 



including all descrambling keys to be used for 
descrambling the scrambled content is embed- 
ded; 

a -storage step for storing the received scram- 
bled content and the storage information; 
a list enaction step for extracting the list from 
the stored storage information; 
a descramble processing step for (a) extracting 
the predetermined unit of scrambled content 
from the stored scrambled content, (b) extract- 
ing a descrambling key corresponding to the 
predetermined unit of scrambled content from 
the extracted list, and (c) descrambling the ex- 
tracted predetermined unit of scrambled con- 
tent using the extracted descrambling key; and 
a reproduction step for reproducing the prede- 
termined unit of descrambled content in the de- 
scrambled order. 

23. A program used for a reception apparatus which re- 
ceives and reproduces scrambled content, the pro- 
gram has the reception apparatus conduct the fol- 
lowing steps of: 

a reception step for receiving the scrambled 
content, wherein the scrambled content is 
scrambled so that a predetermined unit of 
scrambled content, which is a portion of the 
scrambled content, is descrambled using a de- 
scrambling key corresponding to the predeter- 
mined unit of scrambled content, and a de- 
scrambling key is attached to each predeter- 
mined unit of scrambled content; 
a storage step for storing the received scram - 



35 bled content; 

a list generation step for, when/after storing the 
received scrambled content in the storage step, 
generating a list including ail descrambling 
keys to be used for descrambling the scram- 
40 bled content, based on the descrambling key 

attached to each predetermined unit of scram- 
bled content; 

a descramble processing step for (a) extracting 
the predetermined unit of scrambled content 
45 from the stored scrambled content, (b) extract- 

ing a descrambling key corresponding to the 
extracted predetermined unit of scrambled con- 
tent from the generated list, and (c) descram- 
bling the extracted predetermined unit of 
so scrambled content using the extracted de- 

scrambling key; and 

a reproduction step for reproducing the prede- 
termined unit of descrambled content in the de- 
scrambled order. 

55 

24. A program used for a broadcast apparatus which 
scrambles content and broadcasts the scrambled 
content to a reception apparatus, the program has 
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the broadcast apparatus conduct the following 
steps of: 

an acquisition step tor acquiring content to be 
scrambled and a plurality of descramb ling keys; 5 
a scramble processing step for scrambling a 
predetermined unit of content out of the ac- 
quired content so that the predetermined unit 
of scrambled content is descrambled using a 
descrambllng key different for each predeter- 10 
mined unit or each set of a plurality of predeter- 
mined units; 

an attaching step for attaching auxiliary infor- 
mation to the predetermined unit of scrambled 
content, the auxiliary Information consisting of '5 
(a) information for identifying the scrambled 
content and (b) a descrambling key corre- 
sponding to the content, and used for having 
the reception apparatus generate a list of the 
descrambllng keys; and 20 
a broadcast step for broadcasting the scram- 
bled content to which the auxiliary information 
is added. 



25. A program used for a broadcast apparatus which 25 
scrambles content and broadcasts the scrambled 
content to a reception apparatus, the program has 

the broadcast apparatus conduct the following 
steps of: 

30 

an acquisition step for acquiring content to be 
scrambled and a plurality of descrambllng keys; 
a list generation step for generating a list of the 
descrambling keys; 

an embedding step for embedding the list in at 35 
least one piece of predetermined information to 
generate at least one piece of storage informa- 
tion; 

a scramble processing step for scrambling a 
predetermined unit of content out of the ac- 40 
quired content so that the predetermined unit 
of scrambled content is descrambled using a 
descrambling key different for each predeter- 
mined unit or each set of a plurality of predeter- 
mined units; and 45 
■ a broadcast step for broadcasting the generat- 
ed storage information and the scrambled con- 
tent 

26. A recording medium on which a program used for so 
a reception apparatus which receives and repro- 
duces scrambled content is recorded, the program 
has the reception apparatus conduct the following 
steps of: 

55 

a reception step for receiving the scrambled 
content, wherein the scrambled content is 
scrambled so that a predetermined unit of 



scrambled content, which is a portion of the 
scrambled content, is descrambled using a de- 
scrambling key corresponding to the predeter- 
mined unit of scrambled content, and at least 
one piece of storage information in which a list 
including all descrambling keys to be used for 
descrambling the scrambled content is embed- 
ded; 

a storage step for storing the received scram- 
bled content and the storage information; 
a list extraction step for extracting the list from 
the stored storage information; 
a descramble processing step for (a) extracting 
the predetermined unit of scrambled content 
from the stored scrambled content, (b) extract- 
ing a descrambling key corresponding to the 
predetermined unit of scrambled content from 
the extracted list, and (c) descrambling the ex- 
tracted predetermined unit of scrambled con- 
tent using the extracted descrambllng key; and 
a reproduction step for reproducing the prede- 
termined unit of descrambled content in the de- 
scrambled order. 

27. A recording medium on which a program used for 
a reception apparatus which receives and repro- 
duces scrambled content is recorded, the program 
has the reception apparatus conduct the following 
steps of: 

a reception step for receiving the scrambled 
content, wherein the scrambled content is 
scrambled so that a predetermined unit of 
scrambled content, which is a portion of the 
scrambled content, is descrambled using a de- 
scrambling key corresponding to the predeter- 
mined unit of scrambled content, and a de- 
scrambling key is attached to each predeter- 
mined unit of scrambled content; 
a storage step for storing the received scram- 
bled content; 

a list generation step for, when/after storing the 
received scrambled content in the storage step, 
generating a list including all descrambling 
keys to be used for descrambling the scram- 
bled content, based on the descrambling key 
attached to each predetermined unit of scram- 
bled content; 

a descramble processing step for (a) extracting 
the predetermined unit of scrambled content 
from the stored scrambled content, (b) extract- 
ing a descrambling key corresponding to the 
extracted predetermined unit of scrambled con- 
tent from the generated list, and (c) descram- 
bllng the extracted predetermined unit of 
scrambled content using the extracted de- 
scrambling key; and 

a reproduction step for reproducing the prede- 
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58 



termined unit of descrambled content in the de- 
scrambled order 

28. A recording medium on which a. program used. for 
a broadcast apparatus whiGh scrambles content 5 
and broadcasts the content to a reception appara- 
tus is recorded, the program has the broadcast ap- 
paratus conduct the following steps of: 

an acquisition step for acquiring content to be 10 
scrambled and a plurality of descrambllng keys; 
a scramble processing step for scrambling a 
predetermined unit of content out of the ac- 
quired content so that the predetermined unit 
of scrambled content is descrambled using a « 
descrambling key different for each predeter- 
mined unit or each set of a plurality of predeter- 
mined units; 

an attaching step for attaching auxiliary infor- 
mation to the predetermined unit of scrambled 20 
content, the auxiliary information consisting of 
(a) information for identifying the scrambled 
content and (b) a descrambling key corre- 
sponding to the content, and used for having 
the reception apparatus generate a list of the 25 
descrambling keys; and 
a broadcast step for broadcasting the scram- 
bled content to which the auxiliary information 
is added. 

30 . 

29. A recording medium on which a program used for 
a broadcast apparatus which scrambles content 
and broadcasts the content to a reception appara- 
tus is recorded, the program has the broadcast ap- 
paratus conduct the following steps of: 35 

an acquisition step for acquiring content to be 
scrambled and a plurality of descrambling keys; 
a list generation step for generating a list of the 
descrambling keys; *o 
an embedding step for embedding the list in at 
least one piece of predetermined information to 
generate at least one piece of storage informa- 
tion; 

a scramble processing step for scrambling a 
predetermined unit of content out of the ac- 
quired content so that the predetermined unit 
of scrambled content is descrambled using a 
descrambling key different for each predeter- 
mined unit or each set of a plurality of predeter- so 
mined units; and 

a broadcast step for broadcasting the generat- 
ed storage information and the scrambled con- 
tent. 

55 

30. A computer- readable recording medium on which 
content to be broadcast to a reception apparatus is 
recorded, wherein the reception apparatus receives 



and stores scrambled content, and descrambles 
and reproduces. the stored scrambled content, the 
content comprising: 

scrambled content which is scrambled so that 
a predetermined unit of scrambled content, 
which is a portion of the scrambled content, is 
descrambled using a descrambling key corre- 
sponding to the predetermined unit of content, 
and 

a storage ECM, wherein a list including all de- 
scrambling keys used for descrambling the 
scrambled content is embedded In a portion to 
be encoded in a main body of at least one ECM. 

31 . A method for receiving and reproducing scrambled 
content, the method comprising the steps of: 

a reception step for receiving the scrambled 
content, wherein the scrambled content is 
scrambled so that a predetermined unit of 
scrambled content, which is a portion of the 
scrambled content, is descrambled using a de- 
scrambling key corresponding to the predeter- 
mined unit of scrambled content, and at least 
one piece of storage information in which a list 
including all descrambling keys to be used for 
descrambling the scrambled content is embed- 
ded; 

a storage step for storing the received scram- 
bled content and the storage information; 
a list extraction step for extracting the list from 
the stored storage information; 
a descramble processing step for (a) extracting 
the predetermined unit of scrambled content 
from the stored scrambled content, (b) extract- 
ing a. descrambling key corresponding to the 
predetermined unit of scrambled content from 
the extracted list, and (c) descrambling the ex- 
tracted predetermined unit of scrambled con- 
tent using the extracted descrambling key; and 
a reproduction step for reproducing the prede- 
termined unit of descrambled content in the de- 
scrambled order. 

32. A method for receiving and reproducing scrambled 
content, the method comprising the steps of: 

a reception step for receiving the scrambled 
content, wherein the scrambled content is 
scrambled so that a predetermined unit of 
scrambled content, which is a portion of the 
scrambled content, is descrambled using a de- 
scrambling key corresponding to the predeter- 
mined unit of scrambled content, and a de- 
scrambling key is attached to each predeter- 
mined unit of scrambled content; 
a storage step for storing the received scram- 
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bled content; 

a list generation step for, when/after storing the 
received scrambled content in the storage step , 
generating a iist including all descrambling 
keys to be used for descrambling the scram- 5 
bled content, based on the descrambling key 
attached to each predetermined unit of scram- 
bled content; 

a descramble processing step for (a) extracting 
the predetermined unit of scrambled content 10 
from the stored scrambled content, (b) extract- 
ing a descrambling key corresponding to the 
extracted predetermined unit of scrambled con- 
tent from the generated list, and (c) descram- 
bling the extracted predetermined unit of 15 
scrambled content using the extracted de- 
scrambling key; and 

a reproduction step for reproducing the prede- 
termined unit of descrambled content in the de- 
scrambled order. 20 

33. A method for scrambling content and broadcasting 
the scrambled content to a reception apparatus, the 
method comprising the steps of: 

25 

an acquisition step for acquiring content to be 
scrambled and a plurality of descrambling keys; 
a scramble processing step for scrambling a 
predetermined unit of content out of the ac- 
quired content so that the predetermined unit 30 
of scrambled content is descrambled using a 
descrambling key different for each predeter- 
mined unit or each set of a plurality of predeter- 
mined units; 

an attaching step for attaching auxiliary infor- 35 
mation to the predetermined unit of scrambled 
content, the auxiliary information consisting of 
(a) information for identifying the scrambled 
content and (b) a descrambling key corre- 
sponding to the content, and used for having *o 
the reception apparatus generate a list of the 
descrambling keys; and 

a broadcast step for broadcasting the scram- 
bled content to which the auxiliary information 
is added. 45 

34. A method for scrambling content and broadcasting 
the scrambled content to a reception apparatus, the 
method comprising the steps of: 

50 

an acquisition step for acquiring content to be 
scrambled and a plurality of descrambling keys; 
a list generation step for generating a list of the 
descrambling keys; 

an embedding step for embedding the list in at 55 
least one piece of predetermined information to 
generate at least one piece of storage Informa- 
tion; 



a scramble processing step for scrambling a 
predetermined unit of content out of the ac- 
quired content so that the predetermined unit 
of scrambled content is descrambled usrng a 
descrambling key different for each predeter- 
mined unit or each set of a plurality of predeter- 
mined units; and 

a broadcast step for broadcasting the generat- 
ed storage information and the scrambled con- 
tent. 
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FIG.2 



DATA STRUCTURE OF SCRAMBLING KEY LIST DESCRIPTOR 



CA_Ks_List_descriptor() { 




descriptor_tag 


1 BYTE 


descriptorjength 


1 BYTE 


for(i— 0; i <N; { 




Ks_id 


1 BYTE 


TS packet_number 


2 BYTES 


Ks 

} 

} 


8 BYTES 



Ks_id :SCRAMBLING KEY IDENTIFIER 

(TO IDENTIFY SCRAMBLING KEYS) 

TS_packet_number :THE NUMBER OF TS PACKETS SCRAMBLED 
WITH THE Ks 

Ks :SCRAMBLING KEY 
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DATA STRUCTURE OF SCRAMBLING KEY UST GENERATION DESCRIPTOR 



CA_Ks_Listlnfo_descriptorO { 




descriptor_tag 


1 BYTE 


descriptor length 


1 BYTE 


Ks_id 


1 BYTE 


TS packet number 


2 BYTES 


Ks 

} 


8 BYTES 



Ks_id SCRAMBLING KEY IDENTIFIER 

, (TO IDENTIFY SCRAMBLING KEYS) 
TS_packet_number :THE NUMBER OF TS PACKETS SCRAMBLED 

WITH THE Ks 
Ks :SCRAMBUNG KEY 
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